Copenhagen, Denmark

Security maturity
for the complex world

MVCS ApS delivers business continuity planning, security maturity assessments, and purpose-built software to organizations that cannot afford uncertainty.

Get in touch

What we do
01

Strategy

We work with CISOs, CIOs, and CTOs to define where the organisation needs to be.

The output is a clear, actionable security strategy, mapped against business objectives, with defined priorities, ownership, and a realistic path to execution.

02

Consultancy

We guide organisations through NIS2, ISO 27001, CIS18, and NIST compliance.

That means translating regulatory requirements into operational reality, identifying what genuinely needs to change, and building the evidence to demonstrate it. Independent, framework-agnostic, and without the overhead of a large advisory firm.

03

Cyber Security

We assess security maturity and translate findings into prioritised, actionable recommendations.

For organisations that want to go beyond assessment, we design and facilitate warlab exercises, structured simulations that test incident response, decision-making under pressure, and cross-team coordination before a real crisis demands it.


Our products
Crisis Operations

A real-time command platform for managing active incidents and crises. Defcon-App gives your response team a shared command structure, live status tracking, and a full audit log from first alert to resolution.

Visit defcon-app.com
Risk Assessment

A practical risk management tool built for operational teams. Assess, score, and track organizational risk across departments without the complexity of enterprise GRC platforms.

Visit risk-app.com

About

Trusted by security leaders across industries

MVCS ApS is a Copenhagen-based consultancy specializing in business continuity planning, security maturity assessments, and operational security software. We work directly with CISOs, IT managers, CIOs, and CTOs who need clear-headed, independent counsel without the overhead of a large advisory firm.

Our approach is direct: assess what exists, identify what matters, and build solutions that work in practice. We do not sell frameworks for the sake of frameworks. Every engagement is grounded in operational reality and calibrated to the risk profile of the organization.

Beyond consulting, we develop and maintain Defcon-App and Risk-App, software built specifically for security and continuity practitioners who need operational clarity without unnecessary complexity.


Michael Viehweg

Let's work together

Whether it's a strategic challenge, an operational security question, or a product demo, let's talk.

michael@mvcs.dk