Fjord Line Sails Safer with O3C as Part of Their Security Team
For a leading maritime operator like Fjord Line, maintaining seamless digital operations is mission-critical. Upon joining as Head of Digital Security (CISO) in May 2022, Kim Bruland launched a strategic initiative to modernize the company's security posture. Recognizing the need for specialized expertise, Fjord Line partnered with O3 Cyber (O3C) in early 2023. What began as a collaborative effort has evolved into a seamless integration, with O3C serving as an extension of Fjord Line’s internal team through their continuous Managed Cloud Security service.
A Proactive Partnership with Managed Cloud Security
Kim’s objective was clear: stay ahead of an evolving threat landscape by fortifying Fjord Line’s digital infrastructure. He was starting from a position of strength, as Leif Terje Fonnes and his development department had already established a highly skilled, security-focused culture."We already had a strong foundation thanks to Leif Terje’s team and their proactive approach and focus on product security," Kim explains. "But to reach the next level, we wanted a partner who could work side-by-side with us as one unit. O3 Cyber was the perfect fit to augment our internal strengths."This partnership was defined by active, joint execution. Rather than working in silos, the teams from Fjord Line and O3C operated as a single entity to achieve several key milestones:
Joint Strategic Roadmap: O3C worked directly with Kim and Leif Terje to co-create a security strategy tailored to Fjord Line’s business logic. This ensured that every cyber investment supported both security goals and development agility.
Unified Security Training: To complement the technical expertise of the developers, the teams launched a company-wide program. This initiative raised security competency across all departments, empowering every employee to act as an essential line of defense.
Collaborative Risk Discovery: Moving beyond simple checklists, the joint team conducted deep-dive security assessments and penetration tests. They focused on identifying complex attack paths an adversary might exploit, combining O3C’s external perspective with the internal team's deep knowledge of their own systems.
Integrated Resilience Engineering: By working together to implement advanced security controls, Kim, Leif Terje, and O3C significantly increased Fjord Line’s ability to withstand and recover from modern threats.
A Proactive Partnership with Managed Cloud Security
As the partnership grew, Fjord Line was ready to evolve from periodic projects to a more predictable, continuous security model. They transitioned to O3C's Managed Cloud Security service, which formalized the collaboration with a clear Service Level Agreement (SLA), guaranteeing response times and service quality.The core value of this transition lies in its proactive nature. O3C is always monitoring for new attack paths and helping Fjord Line mitigate them before adversaries exploit them. A significant benefit is that their experts integrate directly with the company's cloud security tooling. This means they see the same alerts as the internal team in real-time and can immediately begin their analysis to provide actionable advice. This allows Leif Terje’s development team to maintain their speed and agility when building new business features, knowing that O3C is monitoring incoming security issues in the background.The service structure includes a set number of monthly hours, giving Kim and Leif Terje a predictable budget and the freedom to direct their dedicated expert team toward what matters most. Whether it is mitigating attack paths, running workshops, or conducting specific architectural assessments, the hours are consumed based on current priorities."The service is truly proactive; we don't need to raise a ticket or ask for help," Kim explains. This model also employs a data-driven approach that provides clear insights for strategic decision-making:Quarterly Strategic Insights: Kim receives reports that track progress and define upcoming priorities, ensuring the company stays on the right trajectory.
Industry Benchmarking: Real-time performance data allows Fjord Line to compare its security posture against peers, providing an objective measure of success.
Management Transparency: These features provide Kim with better and more transparent reporting for the Fjord Line management team.