Services · Assessment
How good is your security — really?
An assessment of your company’s security measured against NIST CSF 2.0 — a recognized, voluntary framework with six functions, from governance to recovery. You get a maturity scorecard, a top-10 action list and a roadmap for the next 12 months. No scare tactics, no legal clauses — just an honest status and a plan.
Assessment
Price
from NOK 12,000
light NOK 12,000–20,000 · full NOK 20,000–50,000
All prices are final — Halvra is not VAT-registered, so no VAT is added.
What’s included
- A maturity scorecard across all six NIST CSF 2.0 functions: govern, identify, protect, detect, respond and recover
- Interviews with management and whoever runs IT — we measure practice, not just documents
- A technical review of your most important systems and access
- Top-10 actions ranked by impact and effort — most cost little
- A 12-month roadmap with a realistic order and rough estimates
- Mapping to the baseline principles from NSM (the Norwegian National Security Authority), so the result also works against Norwegian requirements
- A review meeting where we explain the scorecard in plain language
How we work
- 01
Free intro call
We clarify size, systems and ambition, and you choose the light or full assessment. Fixed price before we start.
- 02
Mapping
Interviews and a technical review. The light version builds on interviews and spot checks; the full assessment goes deeper into the systems.
- 03
Scorecard and analysis
We score maturity per function and rank the actions by what buys the most security per krone.
- 04
Report and roadmap
You get the scorecard, the top-10 list and the 12-month roadmap — and a review where you can ask about anything.
A fit for you if
- want to know where you stand before spending money on security measures
- get security questionnaires from customers or insurers and need a structured answer
- want a neutral yardstick to measure progress against, year over year
- want to start on security without committing to a regulatory track
Common questions
What does a security posture assessment cost?
The light version costs NOK 12,000–20,000 and suits most small businesses. The full assessment costs NOK 20,000–50,000 and goes deeper into systems and processes. You get a fixed price after a short call.
How long does it take?
The light assessment is usually delivered within 1–2 weeks, the full assessment within 3–4 weeks from kickoff — mostly depending on how quickly we can schedule the interviews.
What is NIST CSF 2.0 — and why that?
A voluntary, internationally recognized framework for security work, updated in 2024 with its own governance function. It’s not a law and not a certification — which is exactly why it’s a safe, neutral yardstick. The results are also mapped to the NSM baseline, so they stay relevant in a Norwegian context.
What can the report be used for — and not?
It gives you status, priorities and a roadmap, and works well as an answer to customer security questionnaires and as a basis for management decisions. It is an assessment with a clearly defined scope — not a certification, not a guarantee against incidents, and not legal advice.
We barely have an IT department. Does this make sense?
Yes — the assessment scales with your size. For a small business, the scorecard focuses on what’s actually relevant: access, backup, email security and preparedness. The top-10 list stays equally down to earth.
What happens afterwards?
The roadmap is yours. Many implement the actions themselves, some rerun the assessment after a year to measure progress, and some get help from us on individual actions. No lock-in.
Often bought together with
Security review (NSM baseline principles)
Interviews, a technical check and vulnerability scanning — a top-10 action list in a report management understands.
NOK 14,900–29,900
Password manager and MFA for the whole company
One safe home for every password — and two-factor on everything that matters.
NOK 7,900–14,900
Business backup (Microsoft 365 backup)
Backup of email, OneDrive, SharePoint and Teams — with a restore routine that has actually been tested.
NOK 4,900–7,900
Get an honest status — and a plan that holds for 12 months.
04 / Contact
Say hello.
Got a project, a problem or just an idea? Write a few lines — you’ll hear back from a developer, not a form.
- post@halvra.no
- Phone
- +47 406 43 336
- Org. no.
- 938 200 831
- Location
- 62.2282° N · 11.1917° E