Martin Schulze

Martin Schulze Partner

CISO · Security expert · Advisor

Experience

Martin is a security expert and CISO with over 30 years of experience in information security, compliance, and Microsoft-based platforms. He helps organizations in Denmark and around the world build, implement, and embed security and compliance practices.

 

An independent IT entrepreneur, investor, and advisor to several startups for 21 years, I have built up extensive experience in IT, management, and cybersecurity. Expertise in cybersecurity for Microsoft 365, ERP systems, and their IT compliance—including ISO 27001, NIS2, CRA, and GDPR—with a solid understanding of modern cyber threats.

Specialized expertise in Secure Software Development (SSDLC) for Microsoft ERP systems such as Business Central, Navision, Dynamics 365, and NAV.
Member of several boards of directors and advisory boards. Responsible for nesp.ONE’s export activities.
data-lazy-src="https://usercontent.one/wp/nespone.com/wp-content/themes/bricks/assets/images/placeholder-image-800x600.jpg"

Career

Jan. 2024 – present
Founder and Partner / Nesp.ONE

Mar. 2025 – present
Board Member / ESTRID AND CARL TORKILD-HANSEN FOUNDATION

Feb. 2025 – present
Board Member / Margit and Jørgen Andersen Foundation

Oct. 1990 – present
Founder / Solutionlab

Jan. 2021 – present
Partner / Praesidio Group

Jan. 2016 – Dec. 2022
Founder & Senior Principal / ShareNordic

May 2000 – Dec. 2022
Owner / Kolubert

Jun. 2012 – Jun. 2018
Co-Founder & Partner / Baltic M&A

Jun. 2010 – Jun. 2018
Co-Founder & Partner / ERP Department

1995–2018
Board Member / Selected Boards

1995–2000
Co-Founder & CEO / Delfin Software

Areas of expertise

Cybersecurity in general
NIS2
ISO 27001
CRA Cyber Resilience Act
D-Mark
Secure Software Development (SSDLC)
ERP security specialist for Microsoft ERP systems
Business consultant for digital transformation
AI Act
Background checks
.

Media & Publications

Language

Swedish
Danish
English

data-lazy-src="https://usercontent.one/wp/nespone.com/wp-content/themes/bricks/assets/images/placeholder-image-800x600.jpg"

The author's previous publications

Cyberangreb: Kan virksomheden fungere, når IT er nede?

14 september, 2026

Cyberangreb: Kan virksomheden fungere, når IT er nede?

En cyberstresstest viser, om virksomheden kan fortsætte kritiske funktioner under længerevarende IT-nedbrud.

AI-sikkerhed i maskintempo: Er jeres patchproces hurtig nok?

14 september, 2026

AI-sikkerhed i maskintempo: Er jeres patchproces hurtig nok?

AI kan forkorte tiden fra sårbarhed til angreb. Se, hvordan virksomheden styrker patchprocessen og handler sikkert.

Incident response

10 september, 2026

Incident response: 6 krav til jeres sikkerhedsleverandør

ENISA forbereder EU-certificering af managed security services. Se seks krav danske virksomheder bør stille til SOC- og incident response-leverandører nu.

ISO 27001-certificering: Er organisationen klar?

8 september, 2026

ISO 27001-certificering: Er organisationen klar?

Overvejer I ISO 27001-certificering? Se fem tegn på, at jeres SMV er moden nok, og få en praktisk vej fra risikovurdering til audit.

Kvantesikker kryptografi

8 september, 2026

Kvantesikker kryptografi: Derfor bør danske virksomheder begynde i 2026

EU vil have overgangen til kvantesikker kryptografi i gang i 2026. Se fem skridt til kryptografioverblik, leverandørkrav og en realistisk PQC-plan.

DORA i praksis

8 september, 2026

DORA i praksis: Kan jeres beredskab følge med AI-drevne cyberangreb?

Finanstilsynet skærper fokus på AI-drevne cyberrisici. Se, hvordan DORA forbinder BIA, beredskabsplaner, test og ledelsesansvar.

Zero-click phishing

8 september, 2026

Zero-click phishing kræver kontrol af mailplatformen

Zero-click phishing kan kompromittere en sårbar mailplatform uden et klik. Se, hvordan I styrker opdateringer, logning og beredskab.

CRA-rapportering

8 september, 2026

CRA-rapportering fra 11. september: Sådan forbereder producenter de første 72 timer

CRA-rapportering starter 11. september 2026. Se frister, Single Reporting Platform og fem oplysninger, producenter skal have klar.

Softwareforsyningskæde

8 september, 2026

Softwareforsyningskæde: Sådan reducerer I risikoen i pakker og CI/CD

Sådan reducerer I risikoen i softwarepakker og CI/CD. Få fem arbejdsspor til afhængigheder, build-adgang, scanning og beredskab.

Passkeys mod phishing

7 september, 2026

Passkeys mod phishing: Beskyt tilmelding, recovery og helpdesk

Passkeys bremser phishing, men tilmelding og recovery kan misbruges. Få fem kontroller til Microsoft 365, helpdesk og hurtig reaktion.