Global Regulatory Roadmap & Resilience Implementation
A Nordic data centre operator faced four major EU regulations at once, alongside its ISO 27001 recertification. NCG led the regulatory roadmap across the global organization, implemented the controls, and built a business continuity management system from the business impact analysis up.
Client Overview
Challenges Faced By Client
As a supplier to financial institutions and other regulated customers, the client had to meet its own obligations and support its customers' obligations under several new EU regimes at the same time.
- Overlapping requirements across NIS 2, GDPR, DORA and the EU AI Act
- ISO 27001 recertification due during the same period
- No formal business continuity management system
- Limited internal capacity to run several compliance programmes in parallel
How NCG Helped
One roadmap, one control set, mapped to every regulation that applies.
Regulatory roadmap
Assessed which obligations applied to the organization and its customer contracts, then sequenced the work into a single prioritised roadmap.
Control implementation
Led implementation of controls across NIS 2, GDPR, DORA and the AI Act, reusing one control set wherever the requirements overlap.
ISO 27001 recertification
Led the recertification effort, from internal readiness to the certification audit.
Business continuity management system
Implemented a BCMS across the organization, including business impact analyses, business continuity plans and disaster recovery plans.
Solutions Implemented By NCG
A compliance programme the organization can run and evidence on its own.
- Regulatory applicability assessment and roadmap
- Unified control framework mapped to four regulations
- ISO 27001 recertification
- Business impact analyses
- Business continuity and disaster recovery plans
