What Otte does

Otte AS is a Norwegian private limited consulting firm headquartered at Stortingsgata 12, Oslo, founded in 2019 by Torgeir Waterhouse. The firm delivers advisory and sparring-partner services to executives, leadership teams, and boards on how technology, regulation, and policy affect corporate strategy, business models, and organizational structure, with particular emphasis on information security and privacy. Core practice areas are management consulting, information security advisory, and privacy/data protection services, supplemented by training, courses, and tabletop exercises. The company explicitly targets small and medium-sized Norwegian organizations that lack internal capacity for IT security and privacy oversight, while also serving public-sector bodies and leadership groups.

The service portfolio is built around recurring fractional-leadership offerings — CISO-as-a-Service and Data Protection Officer (Personvernombud)-as-a-Service — alongside project-based work on Data Protection Impact Assessments, privacy-by-design in system development, governance system design, and incident handling. There is no proprietary technology platform; the firm's offering is people-hours-based advisory work, priced via quote-based consulting engagements. The four-person team holds ISO27001 and PRINCE2 certifications and brings combined IT-and-law training (forvaltningsinformatiker) and prior experience from the Norwegian Directorate of Immigration (UDI) and the University of Oslo (UiO).

Otte generates revenue exclusively through professional services fees, with no disclosed pricing, no software or productized revenue stream, no outside funding, and no reported financials. GTM is sales-led and relationship-based, relying on direct client engagement, referrals, and thought-leadership visibility from the founding partner's 25+ years in IT policy and his prior roles at Forbrukerrådet and IKT-Norge. Geographic scope is single-country (Norway), with no disclosed international clients.

Name

Otte

Legal name

Otte AS

Website

https://otte.no

Company type

Private

Founded year

2019

Operating status

Operating

Headcount range

1–10 employees

Short description

Otte is a four-person Oslo-based consulting firm founded in 2019 that advises Norwegian SMBs, leadership teams, and public-sector organizations on IT security, privacy compliance (including CISO-as-a-Service and DPO-as-a-Service), and technology strategy.

Ownership category

akta.pro rank

Headquarters

HQ city

Oslo

HQ country

Norway

HQ region

Europe

Offices1 record

Markets served

GTM type

B2B

Offering type

Services

Cost components

Personnel, Operations, Marketing or Sales

Revenue model

1. Consulting Services: Otte generates revenue through professional consulting services including management advisory, information security consulting, privacy services (CISO-as-a-Service, Data Protection Officer-as-a-Service), training, courses, and exercises.

Go-to-market motion1 record

Distribution channels1 record

Marketing channels2 records

Core offering

Otte AS is a Norwegian management consulting firm offering advisory and sparring-partner services to businesses, public sector bodies, leadership teams and boards on how technology, regulation and policy affect strategy, business models and organizational structure. Its portfolio includes management consulting, information security advisory, privacy and data protection advisory, CISO-as-a-Service, Data Protection Officer-as-a-Service (Personvernombud), support for in-house privacy officers, and training, courses and exercises.

Product overview

Otte is a management consulting company offering advisory and consulting services in strategy, technology, government affairs, digital security, and privacy. The company provides a portfolio of professional services including management consulting, information security advisory, and privacy/data protection services. These services are delivered through dedicated offerings such as CISO as a Service and Privacy Officer (Personvernombud) services, supplemented by support services for existing privacy officers and training programs. The firm functions as a sparring partner for executives, management teams, and boards across both private and public sectors.

Differentiator

Problem solved

Functional benefit

Products and services

• Management Consulting Strategic advisory services for executives, management teams and boards on how technology, regulation and policy affect business strategy, business models and organizational structure. Includes acting as sparring partner in internal and external processes with the organization's own staff, customers, suppliers, media or authorities.
• Information Security Services Advisory services that help organizations map their security maturity, develop action plans, establish security routines, deliver training and provide ongoing guidance to leadership and boards on managing IT security responsibilities.
• Privacy and Data Protection Services Advisory services covering compliance with privacy regulations, including Data Protection Impact Assessments (DPIA), privacy-by-design in system development, regulatory work and organizational change in both public and private sectors.
• CISO as a Service Provision of a Chief Information Security Officer (CISO) on an outsourced basis for organizations that need dedicated information security leadership without hiring a full-time internal CISO.
• Data Protection Officer Services (Personvernombud) Otte serves as a Data Protection Officer (Personvernombud) for organizations as defined under Norwegian/EU privacy regulations, ensuring compliance with privacy rules and acting as contact point for customers, external parties and the Norwegian Data Protection Authority (Datatilsynet).
• Support for Privacy Officers Ongoing support services for existing privacy officers within client organizations, including training implementation, governance system evaluation and updates, privacy impact assessments, and incident handling.
• Training, Courses and Exercises

Segments3 records

Ideal customer profiles3 records

Technology focussed No

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Scale indicators1 record

Recent moves5 records

Expansion highlights4 records

Regional players

• Atea Norway: Norway's largest IT infrastructure and services provider, with growing cybersecurity and advisory offerings to public sector. Adjacent competitor on IT security consulting mandates in the Norwegian market.

Direct peers

• Netsecurity AS: Norwegian cybersecurity consulting and managed security services firm serving SMBs and public sector. Overlaps with Otte on security advisory and CISO/privacy services for Norwegian organizations.
• Watchcom Security Group: Nordic cybersecurity and compliance consultancy with strong presence in Norway. Comparable advisory-led model focused on information security, privacy, and GRC, serving similar SMB and public-sector clients.
• Mnemonic: Norwegian-headquartered cybersecurity consultancy offering managed detection, incident response, and advisory services. Directly comparable to Otte on the information security advisory and CISO-as-a-Service offering, with a similar Norway-centric customer base.

Broad incumbents

• Deloitte Norway: Big Four firm offering risk, privacy, and cybersecurity advisory in Norway. Comparable on regulatory compliance and CISO-as-a-Service offerings but with significantly larger bench and enterprise client base.
• KPMG Norway: Big Four firm with a cybersecurity and privacy advisory practice in Norway. Comparable on GDPR, NIS2, and CISO/DPO advisory, with cross-sell from audit and broader consulting relationships.
• Capgemini Norway: Global consulting firm with Norwegian operations covering cybersecurity, data protection, and regulatory advisory. Overlaps with Otte on privacy and security advisory but serves larger enterprise and public-sector clients.
• PwC Norway: Big Four firm with a dedicated cybersecurity and privacy practice serving Norwegian private and public-sector clients. Comparable advisory services but with substantially broader delivery capability.
• Sopra Steria Norway: Major Nordic IT consultancy with cybersecurity, privacy, and digital transformation practices. Competes with Otte on enterprise advisory mandates but operates at materially larger scale.
• Bouvet ASA: One of Norway's largest IT and management consultancies with a dedicated security and privacy practice. Comparable on cybersecurity and digital advisory, but at significantly larger scale and broader portfolio.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat4 records

Key risks6 records

Key highlights5 records

Customer concentration

Compliance3 records

Revenue estimate

Valuation estimate

Number of profiles

Profiles5 records

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Otte