Nasjonal sikkerhetsmyndighet

Name

Nasjonal sikkerhetsmyndighet

Legal name

Nasjonal sikkerhetsmyndighet

Website

https://nsm.no

Company type

Private

Founded year

2003

Operating status

Operating

Headcount range

101–250 employees

Ownership category

akta.pro rank

Product category

National Cybersecurity and Protective Security Services

NAICS

National Security (928110), Security Systems Services (except Locksmiths) (561621), Investigation and Personal Background Check Services (561611)

akta.pro primary industry

OT/ICS & Critical Infrastructure Cybersecurity Services (BPAKAHAN)

akta.pro secondary industries

OT Threat Detection & Monitoring (NDR/IDS for ICS) (HDADAJAF), Attack Surface Management (EASM/CAASM) (HDADAHAC), Security Architecture & Engineering Advisory (Zero Trust, IAM, Network) (BPAKADAF), Identity & Access Security Services (IAM, PAM, Zero Trust) (BPAKAHAI)

Keywords

• National cybersecurity services
• Protective security services
• Security clearance processing
• Vulnerability assessment services
• Security training and certification

Headquarters

HQ city

Kolsås

HQ country

Norway

HQ region

Europe

Offices2 records

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Technology or R&D, Operations, Infrastructure, Others

Revenue model

1. Government Budget Funding: NSM is a Norwegian government agency funded through the national budget. The agency provides regulatory, advisory, and security services as part of its public mandate.

Go-to-market motion2 records

Distribution channels2 records

Marketing channels5 records

Core offering

Nasjonal sikkerhetsmyndighet (NSM) is Norway's national authority for preventive security and the expert body for information and object security. It delivers 24/7 cyber incident response through the Nasjonalt cybersikkerhetssenter (NCSC), operates the VDI national internet sensor network for detecting intrusion attempts against critical infrastructure, provides regular vulnerability mapping (Allvis NOR) and regulated penetration testing (Inntrengingstjenester), issues independent third-party product certifications (SERTIT), processes security clearances (Sikkerhetsklarering), and offers courses, presentations, and the annual Sikkerhetskonferansen to Norwegian government entities, critical infrastructure operators, and businesses subject to the Security Act.

Product overview

Nasjonal sikkerhetsmyndighet (NSM) is Norway's expert body for information and object security, providing a comprehensive portfolio of preventive security services. The organization operates as a single unified agency offering both direct security services and guidance. Core services include the Nasjonalt cybersikkerhetssenter (NCSC) for 24/7 cyber incident response, the Varslingssystem for digital infrastruktur (VDI) national sensor network, Allvis NOR vulnerability scanning, Inntrengingstjenester penetration testing, and SERTIT product certification. Supporting offerings include Sikkerhetskonferansen annual conference, NSM Kurssenter training programs (classroom and e-learning), guidance documents and handbooks, security clearance services, and official forms. The Sikkert.no national digital security portal represents a collaborative initiative with Datatilsynet, Digitaliseringsdirektoratet, and Politiet.

Differentiator

Problem solved

Functional benefit

Products and services

• Nasjonalt cybersikkerhetssenter (NCSC) National Cyber Security Centre that protects fundamental national functions, public administration, and business against cyberattacks. Operates a 24/7 incident response line and coordinates national cyber defence for Norwegian organisations.
• Varslingssystem for digital infrastruktur (VDI) National internet sensor network that detects attempted data breaches against Norwegian critical infrastructure across sectors, providing subscribing organisations with notifications of threats targeting their systems.
• Allvis NOR Service consisting of regular mapping and vulnerability investigation of selected IP addresses available on the Internet, used to identify exposed vulnerabilities in Norwegian organisations' external-facing systems.
• Inntrengingstjenester (Penetration Testing Services) Penetration testing service where NSM tests the security of computer systems. Testing is carefully agreement-regulated between NSM and the organisation, providing an independent assessment of exploitable weaknesses.
• SERTIT Product Certification Certification service in which an independent third party assesses the degree of trust that can be placed in the security of a product, providing formal assurance to procurement and risk decisions.
• Cybersjekk (Cybersecurity Assessment) Cybersecurity assessment service offered by NSM to evaluate an organisation's cyber security posture and identify gaps requiring remediation.
• Sikkerhetsklarering (Security Clearance) Security clearance processing service for businesses and private individuals, conducted by NSM under Norway's national security framework to vet personnel for access to classified information.
• NSM Kurssenter (Course Center) Course center offering courses in preventive security work, available as classroom teaching or e-learning, covering risk assessment, security management, and other security disciplines.
• Foredrag fra NSM (NSM Presentation Services) Presentation service in which NSM staff share professional knowledge with public and private organisations, available on a bookable basis.
• Sikkerhetskonferansen (Annual Security Conference) Annual security conference organised by NSM, bringing together industry experts, government officials, and security professionals in Norway; next instance 21–22 April 2026.

Quantifiable outcome

• Detects cyber intrusion attempts against critical infrastructure across sectors through national sensor network

Segments3 records

Ideal customer profiles3 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature6 records

Partnerships

Eight partnerships are on record, tiered core.

• Sikkert.no (National Digital Security Portal)coreStrategic or Co-development Partner · 1 January 2026Sikkert.no is developed by NSM in close collaboration with Datatilsynet (Data Protection Authority), Digitaliseringsdirektoratet (Directorate of Digitalisation), and Politiet (Police). The portal provides clear, consistent, and correct advice on digital security.
• CRESCENDO (Nordic Cooperation Project)coreStrategic or Co-development Partner · 1 January 2025CRESCENDO is a Nordic cooperation project supporting innovative cybersecurity solutions for the power sector. Seven Norwegian businesses received funding through this initiative. The scheme is administered in Norway by Norges forskningsråd (Research Council of Norway) and NSM.
• Norges forskningsråd (Research Council of Norway)coreStrategic or Co-development Partner · 1 January 2025Norges forskningsråd administers the CRESCENDO scheme in Norway alongside NSM, providing funding for innovative cybersecurity projects in the power sector.
• Nordic-Baltic Cyber ConsortiumcoreStrategic or Co-development Partner · 1 January 2024Seven countries have joined forces to better analyze, detect, and prevent cyber attacks across the Nordic and Baltic regions. Norway participates through NSM in this new cyber consortium.
• Datatilsynet (Data Protection Authority)coreStrategic or Co-development PartnerNorwegian Data Protection Authority partnered with NSM to develop Sikkert.no, the national portal for digital security advice.
• Digitaliseringsdirektoratet (Directorate of Digitalisation)coreStrategic or Co-development PartnerDirectorate of Digitalisation partnered with NSM to develop Sikkert.no, providing digital security guidance to Norwegian organizations and citizens.
• Politiet (Police)coreStrategic or Co-development PartnerNorwegian Police partnered with NSM on the Sikkert.no national digital security portal initiative.
• Forskningsrådet (Research Council of Norway)coreStrategic or Co-development PartnerAlong with FFI (Norwegian Defence Research Establishment), identified technologies and technology areas that are particularly sensitive for national security on behalf of Kunnskapsdepartementet (Ministry of Education and Research).

Scale indicators2 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• BSI (Bundesamt für Sicherheit in der Informationstechnik): Germany's federal cybersecurity authority, providing national CERT services, product certification, security consulting, and regulatory oversight. Closely mirrors NSM's combined regulatory + operational service model and statutorily defined role.
• NCSC-UK (National Cyber Security Centre): UK's national technical authority for cyber incidents, providing 24/7 incident response, vulnerability disclosure, certifications, and sector-specific guidance. Directly comparable to NSM/NCSC in mandate and operational service portfolio.
• ANSSI (Agence nationale de la sécurité des systèmes d'information): France's national cybersecurity agency, operating as the country's expert authority for information security and providing incident response, certification, and advisory services. Directly comparable to NSM in mandate, structure as a state agency, and service portfolio spanning CERT, certification, and pen testing.
• CCCS (Canadian Centre for Cyber Security): Canada's national cybersecurity authority providing unified CERT, vulnerability management, and advisory services under a single agency. Closely mirrors NSM's structure with combined regulatory authority, incident response, and national service delivery.

Broad incumbents

• CISA (Cybersecurity and Infrastructure Security Agency): US federal agency for critical infrastructure cybersecurity, providing incident response, vulnerability management, and sector-specific guidance. Larger and broader scope than NSM, but operates an analogous statutory authority + operational service model for national cyber defense.
• ENISA (European Union Agency for Cybersecurity): EU-level cybersecurity agency coordinating member-state capabilities, providing certification frameworks, and supporting CSIRTs. Comparable to NSM in advisory and certification roles, but at a supranational level rather than a single national authority.
• NIST (National Institute of Standards and Technology): US agency developing cybersecurity frameworks, standards, and guidelines adopted globally. Comparable to NSM in standards-setting and advisory role, though NIST does not directly operate incident response services as NSM's NCSC does.

Regional players

• Traficom / NCSC-FI (Finnish Transport and Communications Agency): Finnish national cybersecurity authority within Traficom, providing CERT services, regulatory oversight, and sector guidance. Nordic peer to NSM with comparable mandate and active participation in Nordic-Baltic Cyber Consortium.
• MSB (Swedish Civil Contingencies Agency) / CERT-SE: Swedish government agency responsible for civil contingencies including cybersecurity, operating CERT-SE for national incident response. Nordic regional peer to NSM with overlapping mandate and participation in Nordic-Baltic Cyber Consortium.
• CFCS (Center for Cyber Security, Denmark): Danish national cybersecurity authority providing threat assessments, incident response support, and advisory services. Nordic regional peer to NSM with directly comparable mandate scope and statutory role under national security legislation.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights7 records

Customer concentration

• Xx.com/NSM_no
• Facebookfacebook.com/NSMnorge
• LinkedInlinkedin.com/company/nasjonal-sikkerhetsmyndighet

Revenue estimate

Valuation estimate

Number of profiles

Profiles3 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Nasjonal sikkerhetsmyndighet