Transportation & Infrastructure

Security & Defense

In a world where everything is interconnected, and threats are constantly evolving, staying ahead of security challenges is more critical than ever.

At Sweco, we understand that an effective security strategy requires a flexible approach—one that not only provides protection but also ensures compliance with legal requirements and meets the growing expectations of both businesses and the public sector.

We offer independent and pragmatic advisory services, providing a 360-degree approach to both cyber and physical security. Our dedicated security and defense team in Denmark possesses deep expertise and benefits from Sweco’s strong international network. As a Recognized Security Organization (RSO), all our specialists handle classified information and projects in close collaboration with our clients.

This ensures that we always deliver tailored solutions that align with your specific needs, providing a solid foundation in an ever-changing world.

Who Are Our Clients?

We work with organizations across various sectors, including:

Private enterprises
Public institutions
Utility companies
Transportation and infrastructure
Financial sector
Industry and manufacturing
Pharmaceuticals
Food industry

Security 360°: Our Core Services

Cybersecurity: Cybersecurity is crucial for every organization, but needs and challenges vary depending on size, industry, and current security maturity. We provide targeted advisory services and solutions to help navigate the complex threat landscape and meet regulatory requirements. Our expertise includes Gap analyses (ISO 2700x, NIST CSF), NIS2 Readiness and Cyber Roadmap development.

Security for All Types of Buildings and Facilities: We have extensive experience and broad expertise in addressing our clients’ physical security needs—from initial assessments and design to procurement, supervision, and commissioning. Our specialized knowledge in anti-terrorism measures, detection systems, and perimeter security ensures that property owners maintain full control over secured areas. We conduct thorough penetration tests to identify vulnerabilities and provide actionable recommendations to enhance physical security.

Physical Security Compliance: We offer expert guidance to ensure compliance with national and international security standards. Our services help organizations implement effective physical security measures tailored to their specific needs.

Anti-Terrorism Measures: We provide strategic advisory services on proactive measures to mitigate terrorist threats, including risk assessments and the development of robust security protocols.

ISPS Advisory & Port Security: As a Recognized Security Organization (RSO), we advise Danish ports on vulnerability assessments and security planning. Ports represent critical infrastructure and play a key role in national commerce and trade. They face complex challenges where physical and digital threats, combined with stricter regulations, demand a focused response.

Emergency Preparedness & Security Training: We assist organizations in developing and testing emergency response and crisis management plans, ensuring they are prepared to handle security incidents swiftly and effectively. Additionally, we provide tailored security training programs to strengthen employees’ ability to identify and respond to threats, including espionage risks.

Meet our experts

Benno Nagbøl
Head of Security & Defense

Benno Nagbøl is a specialist in technical security with over 20 years of experience. He has advised on and implemented solutions for building protection, perimeter security, and heavy vehicle mitigation. In recent years, he has played a key role in the implementation and adaptation of the NIS2 and CER directives for critical infrastructure, giving him extensive experience in translating EU regulations into concrete solutions.

“In a time of increasing threats, it is essential for me that security solutions not only comply with regulatory requirements but also become an integrated part of an organization’s security framework. We combine deep technical expertise in physical and cybersecurity with a holistic approach to strategic planning and organizational resilience. This enables us to address complex threats ranging from cyberattacks and data confidentiality to physical security and crisis preparedness.”

Hans Larsen
Chief Specialist, Cyber & Geopolitics

Hans Larsen has over 14 years of international experience, primarily from the financial sector and consultancy industry, with a focus on risk management and crisis response. His expertise in cybersecurity and geopolitics provides him with a sharp analytical approach to risk assessment and mitigation at both strategic and operational levels.

“My approach is always proactive, pragmatic, and solution-oriented. I work closely with my clients to identify and address potential issues before they become real threats. I help implement tailored solutions that not only protect against current challenges but also establish a strong foundation for future needs.”

Christian Hviid
Chief Specialist, Physical Security, Risk Assessments, Contingency Planning & Crisis Exercises

Security expert with over 25 years of experience in the security field, including extensive experience from the military and police. Christian possesses strong expertise in security management, awareness training, and risk mitigation, with a focus on high-risk clients in the data, pharmaceutical, and embassy sectors. He also has significant experience in stakeholder management and has been responsible for presenting reports to boards and top management in major Danish companies.

“Analyzing external threats is in my DNA, and I take pride in identifying the risks our clients face and ensuring the right contingency measures. I emphasize providing our clients with the necessary tools to maintain an appropriate preparedness level— tested and well-documented.”

Pragmatic Solutions to Complex Challenges

We deliver pragmatic solutions to complex challenges by combining technical expertise in physical and cybersecurity with a holistic approach to strategic planning. Our advisory services are tailored to your specific needs, ensuring that solutions not only comply with regulatory requirements but also create genuine value.

Explore our services within cybersecurity, physical security, and port security below. Feel free to reach out if you need more information about our offerings or want to learn more about how we can support your organization.

Our services

Cybersecurity: Cyber Roadmap

A Cyber Roadmap provides your organization with a strategic cybersecurity plan, ensuring that you are well-prepared for future threats and risks. It helps prioritize necessary security measures, allocate resources efficiently, and implement long-term solutions to protect critical data and systems. Our Cyber Roadmap is delivered in a visual and pragmatic format, offering a clear overview that can be used both in executive-level discussions and as a solid foundation for IT leadership. It enables organizations to implement cybersecurity strategically and effectively across all levels.

A Cyber Roadmap is relevant for:

Companies looking to develop a long-term cybersecurity strategy
Public authorities and organizations responsible for critical infrastructure protection
IT departments in need of a clear and structured plan for future cybersecurity efforts
Organizations aiming to optimize and strengthen their existing security measures

Cybersecurity: ISO 2700x Gap Analysis

Sweco’s ISO 2700x Gap Analysis is a pragmatic assessment that identifies gaps between your organization’s current cybersecurity practices and the requirements of the relevant ISO 2700x standards. This analysis references a range of leading standards that we utilize in the process, including: ISO 27001, ISO 27002, ISO 27005, ISO 27017

The analysis helps uncover areas where your organization can enhance its cybersecurity and risk management while ensuring compliance with regulations and industry best practices. Our Gap Analysis is valuable for both public and private sector organizations looking to strengthen their security posture and align with international standards.

NIST Cybersecurity Framework (CSF) Gap Analysis

The NIST Cybersecurity Framework (CSF) is a recognized framework developed by the National Institute of Standards and Technology (NIST) in the United States. It helps organizations improve their cybersecurity by identifying, protecting, detecting, responding to, and managing cyber threats.

A NIST CSF Gap Analysis helps assess and strengthen your cybersecurity in line with these international standards. It ensures that your organization can identify risks and vulnerabilities relative to NIST CSF requirements and develop solutions that make your cybersecurity more robust and future-proof. This analysis helps you meet both U.S. and international standards, strengthening your position in the global market.

NIS2 Readiness Assessment

A NIS2 Readiness Assessment is an essential process for your organization. It ensures that you are prepared to meet the stricter requirements of the NIS2 Directive, an EU regulation that imposes high cybersecurity standards.

The directive is relevant for sectors such as energy, transport, healthcare, and water supply, as well as for digital services like cloud solutions and data centers. It also applies to public authorities and telecommunications companies handling critical infrastructure and data. By conducting a NIS2 Readiness Assessment, you can identify and close security gaps, minimize risks, and ensure that your organization complies with the new EU requirements.

Physical Security and Protective Measures

We offer a comprehensive solution for physical security, ranging from preliminary studies and design to procurement, supervision, control, and commissioning. With extensive experience and specialized knowledge in counter-terrorism, detection systems, and perimeter security, we help protect buildings and facilities from physical threats. We conduct thorough intrusion tests to identify vulnerabilities and provide concrete recommendations to enhance security.

We ensure compliance with national and international security standards and offer expert advice on implementing effective physical security measures tailored to your needs. Our strategic advice on anti-terrorism measures includes risk assessments and the development of robust security protocols that effectively mitigate terrorism threats.

ISPS Advisory and Port Security

Danish ports are critical infrastructure and play a crucial role in the country’s economy and business sector. Ports face complex challenges, where both physical and digital threats, along with enhanced regulatory requirements, demand significant attention. At Sweco, we apply a holistic approach to port security, offering the following services:

Vulnerability Assessments: Thorough reviews and analysis of the port’s risk profile, specific needs, and regulatory requirements
Security Plans: Development of security and contingency plans based on the risks outlined in the vulnerability assessment. Recommendations and guidance for implementing security measures
Cyber Resilience Audits: Review of digital security measures and advice on improvements to strengthen cybersecurity resilience
Crisis Exercises: Practical training and simulations to ensure that the port and its staff are prepared to handle security-related incidents and comply with mandatory contingency exercises

Emergency Plans, Security Training, and Crisis Exercises

At Sweco, we specialize in developing and testing emergency and crisis management plans to ensure organizations are prepared for security incidents and can respond quickly and in a coordinated manner. Our tailored security training strengthens employees’ ability to identify and manage threats, including espionage.

Additionally, we offer comprehensive training programs in Business Continuity and Crisis Management, customized to meet the specific needs of your organization. Through participation in live exercises, you ensure that your organization is optimally prepared to handle crisis situations while maintaining business continuity and safeguarding operations.

Benno Nagbøl

Head of Security and Defence