Novudom: Cybersecurity driving business decisions

About Novudom

From compliance to competitive edge

Cybersecurity used to be about avoiding fines or staying out of the headlines. Today, it's something bigger. Done right, it becomes a strategic investment that builds trust with customers, strengthens your brand, and fuels sustainable growth. Think of it as moving from defense to offense, turning compliance into confidence, and resilience into reputation.

We're seasoned professionals who've led security programs in some of the world's most complex organizations. We've sat at the leadership table, stood in the control room during crises, and worked alongside teams to embed resilience into everyday operations. That experience means we understand both the big picture and the small details that make security work in practice.

Novudom: Guardians of Trust, Architects of Resilience

Björn Nyhus

Founder & CEO

Over 30 years of experience in the IT industry, with a focus on sales, business development, and executive-level advisory across both the public sector and private enterprise. He has worked closely with leadership teams and boards, driving deals from first contact to long-term partnership.

Has founded and built two consulting firms from the ground up to 20 employees and profitable operations, with full responsibility for business model, sales, and growth.

At Novudom, he is responsible for business development and sales. Björn's strength lies in translating complex risk and security issues into something leadership can understand, prioritise, and act on.

Jonas Landström

Methodology & Analysis

Over 20 years of experience establishing and operationally leading advanced security capabilities across OT, IT, information security, cybersecurity, and GRC.

He has worked in global corporations, connected vehicle environments, industrial production, and critical infrastructure across both the private and public sectors. He has built and run everything from secure infrastructure for connected vehicles to global functions for monitoring, incident response, and data-driven cyber defence with over 100 specialists.

At Novudom, he helps leadership teams build robust, sustainable, and operationally grounded security capabilities that strengthen resilience, regulatory compliance, and long-term business capability.

Our services

Four concrete deliveries

Four sharp deliveries with clear outcomes, timelines, and regulatory fit. Each stands on its own or fits into an ongoing program.

Quick check: how far along are you with digital risk?

Take the assessment in 3 minutes →

Incident Response

A complete package that makes you ready when the incident hits. Current-state analysis, a tailored incident response plan, and a tabletop exercise that tests the capability in practice, aligned with NIS2.

SOC, Modern SOC Framework

Establish a modern SOC that handles all digital security incidents, without building the capability in-house. Facilitated workshop, requirements, and vendor-neutral procurement support, from target state to signed contract.

Secure Procurement

A full-day workshop that builds an internal capability to procure digital security with confidence. You leave with standardized role descriptions, contract templates, and a tailored supplier network.

Supply Chain

Full control over your supply chain with a self-assessment method you run yourselves. Scalable to any number of suppliers, with NIS2 requirements built in if and when they apply.

Our delivery model

From insight to resilience

NovuLens gives you the starting point. Then NovuFlow and NovuLearn take over in an ongoing cycle that builds resilience over time, as a subscription.

Starting point

NovuLens™

Strategic analysis

Map current state, gaps, and risks. Leadership gets a clear decision basis to act on immediately.

Ongoing

NovuFlow™

Governance & execution

Ongoing governance of your security program, with milestones, ownership, and reporting to leadership.

Ongoing

NovuLearn™

Training & exercises

Training and scenario exercises that give leadership and key stakeholders decision-making capability in digital risk.

↻ Continuous subscription

Value for your organization

Confident leadership in digital risk

Leadership makes informed decisions about digital risk, based on facts, not gut feeling.

Compliance that drives trust

NIS2, AI Act and DORA are met with concrete actions that build stakeholder confidence.

Measurable risk management

Clear metrics and reporting that show improvement over time, visible across the organization.

Business-driven resilience

Security work that protects business value, customer trust, and competitive advantage.

How we work

Four steps to resilience

A proven process that takes you from uncertainty to confident leadership, at your pace, with clear ownership.

NovuLens™ analysis

We map current state, gaps and risks. You get a decision basis that leadership can act on immediately.

Prioritization

Together we identify the actions that deliver the greatest impact relative to your risk appetite and resources.

Implementation

We drive or support implementation with clear milestones, ownership, and reporting to leadership.

Ongoing governance

Continuous follow-up, reporting and adaptation, security evolves with your operations.

Novudom Blueprint

What Good Looks Like

for modern digital security

It always starts the same way. An organisation that grows. A digital landscape that becomes more complex. A responsibility that moves from the IT department to the boardroom. And an insight that eventually lands with everyone who succeeds:

Digital security is not technology.
It is a strategic capability.

Novudom Blueprint is our collected experience of what actually works in reality, not in theory. It is shaped by incidents, crises, transformations and hundreds of decisions in organisations that needed to stand firm when the storm hit.

At its core sits one simple principle: We do not build security for organisations. We build their capability to do it themselves.

The Blueprint describes what a modern security capability looks like when it works:

Leadership owns risk, priorities and funding.
Roles, competences and governance are clear and standardised.
IT security, information security, cybersecurity, GRC and leadership work as one coherent whole.
Cross-cutting capabilities, such as architecture, supplier security, DevSecOps, AI security and continuity, tie it all together.
Incidents are detected and managed quickly, in a structured and learning way.
The organisation stands firm even during disruption.

And above all: security is no longer a feeling. It is measurable, governed and real.

This is not a vision. It is not a powerpoint. It is a model that has been implemented in complex organisations, and that works.

This is What Good Looks Like.
This is the Novudom Blueprint.

Read the full Blueprint →

We help leadership lead through cyber threats and regulation.