CAPONIER — Security Consulting & Risk Advisory

01 — Services

From blank page to working security organisation.

Most firms sell you a slice — guards, or pentests, or policies. We build the working whole, then hand you the keys. For companies expanding into new markets, organisations in complex environments, and teams facing their first real compliance mandate.

S/01

Security Management Systems

We build your security organisation from the ground up — who owns security, who decides in a crisis, and a practical Security Management System that holds it all together. Our flagship service.

S/02

Security & Risk Assessment

ISO 31000-based analysis of your protected values, threats and vulnerabilities — country, site and route assessments in any market, from stable capitals to conflict zones.

S/03

Information Security & Compliance

ISO 27001-aligned ISMS build-out, NIS2 readiness, secure communications and vendor risk — designed by an operator who has run SIEM, EDR and IAM at scale, not just written policy.

S/04

Personnel Security & HR

Security screening and vetting interview frameworks built on Swedish military methodology — plus insider-risk programs and the security dimension of onboarding, offboarding and HR policy.

S/05

Crisis Readiness & Incident Response

Incident reporting chains, control-room design, crisis management plans, shelter and evacuation decision frameworks — exercised, not just written.

S/06

Market Entry & Duty of Care

Expanding into a new country — or sending people into a demanding one? Duty-of-care frameworks, journey management, field safety SOPs and entry security planning, wherever you're headed.

Scope of practice

CAPONIER is an advisory, training and documentation practice. We do not provide guarding, armed protection or protective escort services. Where clients require licensed protective services, we design the requirement and refer to vetted, licensed partners.

Where every engagement starts

The Security Baseline Review

An evidence-based picture of where your organisation actually stands — governance, people, information, physical operations and incident readiness — and a prioritised, realistic 90-day plan. Fixed price, fixed scope, no lock-in: you own the findings, and if your own team can carry everything, the report says so in writing.

Book a baseline review

Format: Interviews, document review and a site walkthrough
You receive: A written baseline report and a prioritised 90-day action plan
Leadership session: One hour, working format — findings and decisions
Timeframe: 5–7 working days from start to report
Price: Fixed and quoted up front — no open-ended hours
Delivery: On-site or remote, in English

02 — Method

Assess. Build. Transfer.

Every engagement ends with your organisation owning its own security capability. We build independence, not dependency.

PHASE 1

Assess

A baseline review of your operations, information and people against the threats that actually apply to you. Interviews, site and document review, a prioritised risk picture — in days, not months.

PHASE 2

Build

The Security Management System — organisation, governing handbook, procedures and training — written to doctrine standard your board, auditors and insurers recognise, and sized so your team can actually run it.

PHASE 3

Transfer

Rollout workshops, exercises and a fractional Head of Security retainer while your capability matures. Then we step back — and stay reachable.

03 — About

Built by an operator, not a slide deck.

CAPONIER is led by Anders Bengtsson — a Swedish security professional with twenty years across military command, cyber defence and operations on four continents.

He served as an officer in the Swedish Armed Forces from 2005 to 2025, with international deployments in the Balkans, Central Asia and West Africa, then built and led a 20-person IT & Cyber Defense department at the Swedish Armed Forces CIS Command — establishing its full security framework under ISO 27001 and NIS2. He is currently based in Kyiv, where he has worked with the Ukrainian military and authored a complete security handbook suite for an international company — advisory stress-tested in the hardest operating environment in Europe, applied wherever clients need it.

That range — boardroom to bunker, firewall to field — is the point. Security fails at the seams between disciplines. We work the seams.

ISO 27001ISO 31000NIS2GDPRMITRE ATT&CKDuty of CareOPSECCrisis ManagementVetting & Screening

Credentials

Head of Department, IT & Cyber Defense — Swedish Armed Forces CIS Command
Officer 2005–2025 — Swedish Armed Forces
4 international deployments — NATO & UN mandates
Advisory work in wartime Ukraine — since 2025

Helping organisations operate confidently
in complex environments.