NIS2 and information security
Risk assessment, security policies, logging and an incident response plan built on ISO 27001 principles, so you are ready for conversations with the Danish Agency for Civil Protection and CFCS.
Apply runs systems, security and digital services for Danish public organisations, delivered entirely remotely. We work with the Public Procurement Act, NIS2 and the Web Accessibility Act every day, and we help you prove compliance on paper as well as achieve it in practice.
Technology and paperwork go hand in hand. A well-run server counts for little if the auditors or Datatilsynet cannot see who has access and on what grounds.
Risk assessment, security policies, logging and an incident response plan built on ISO 27001 principles, so you are ready for conversations with the Danish Agency for Civil Protection and CFCS.
Records of processing, data processing agreements, role-based permissions and traceable logs. Read about GDPR and personal data security.
Websites and self-service built to WCAG 2.1 AA, with an accessibility statement kept current. See Public sector websites.
Server management, Entra ID, Intune and backup for organisations spread over several sites. Any hands-on task is carried out by your own IT staff or facilities contractor, guided by our engineer.
Data and backups are hosted with EU-based providers and every transfer is documented, giving you a clear answer when someone asks where residents' records are stored.
An ongoing agreement with ticket logging, committed response times and a monthly report you can drop straight into management information and contract reviews.
We can bid in our own name on tenders and smaller purchases, and we are happy to deliver as a subcontractor to a prime supplier holding a framework agreement, such as one from SKI. Ahead of a tender we can join market consultations and give a realistic view of the scope.
We respond to requests published on Udbud.dk and take part in dialogue meetings so that requirements end up achievable.
An IT assessment of your environment provides hard facts for the specification and for the budget.
We submit on our own or together with a prime supplier, respecting every deadline and formal requirement in the tender documents.
Implementation and operations under the contract, with documentation and handover material that belongs to you.
Tender questions go to tender@apply.dk. Send a draft specification or a link to the notice and we will come back with an assessment of whether and how we can bid.
Everything we do is written down, ready for auditors, regulators and elected members, and clear enough for another supplier to pick up if the contract changes hands.
Delivered in five working days. A prioritised overview for budget planning and a solid basis for a tender.
Done before any security tools are bought. It shows which measures NIS2 and your own risk profile genuinely call for.
Tailored to your organisation. Information security policy, access procedures and a contingency plan; see Security policies and documentation.
Refreshed after every major change. Grounded in a review of the site against WCAG 2.1 AA.
Every month. Tickets, response times and changes, ready for contract follow-up.
The documentation is yours. Reports, policies and runbooks are written so that a successor can continue without starting from scratch, which matters when a re-tender goes to someone else.
We do not claim a framework agreement of our own. We bid directly on tenders and on purchases below the thresholds, and we deliver as a subcontractor to suppliers that are on a framework. Tell us how you buy and we will find the right route.
Yes. Invoices go out in OIOUBL format via NemHandel to your EAN number, carrying your order number or reference so they can be booked without chasing.
Through encrypted remote access using named accounts and full logging. When something physical has to be swapped or moved, your IT staff or facilities contractor does it from written instructions while our engineer stays connected.
Whenever we handle personal data on your behalf, a data processing agreement is put in place. We are glad to work from your own template if you have one.
According to the payment schedule in the contract, usually monthly for operations and on approved milestones for projects. We only ask for prepayment where the tender documents provide for it.
Outline the task or send a draft specification. We reply with an approach and a cost estimate you can use in your budget.
Thank you for getting in touch
One of our consultants already has it. Expect a reply within the working day; anything urgent goes straight to an engineer.
That city is not on our list. Check the spelling or pick the nearest larger town.