Skip to main content
Lumiar
ABOUT LUMIAR

We help industry see risk clearly

Lumiar is an independent advisory company based in Stavanger, Norway. We work at the intersection of OT cybersecurity, industrial AI, engineering, and risk management, with particular attention to technical decisions and consequences for physical operations.

We work with operators, owners and suppliers in oil and gas, power, maritime operations, land-based industry, and other critical infrastructure. Norway is our home market, and we take on engagements outside Norway.

Why Lumiar exists

Industrial control systems are being connected ever more tightly to IT and the outside world. The risk is real, but manageable for those who see clearly. Lumiar was started to give industry advice that is professionally solid, independent of vendor interests, and possible to implement in practice.

The name comes from the Latin lumen, meaning light. That sums up our job: to shed light on risk, architecture, and barriers so you can make good decisions.

Clarity

Lumiar makes complex industrial issues understandable.

Independence

Lumiar has no financial incentives tied to which technology or supplier the client chooses.

Expert challenge

Good advice must also be able to be uncomfortable. An independent adviser has little value if the task is only to confirm what the client already thinks. We must be able to challenge the client, the supplier, and our own first assumptions when the technical basis calls for it.

LUMIAR-MODELL · BESLUTNINGER
Den forsvarlige beslutningen

En forsvarlig beslutning kan forklare antakelsene, evidensen og resonnementet sitt, og den tåler å bli utfordret.

Beslutningen må ta hensyn tilFysisk konsekvensCyberrisikoTekniske begrensningerDriftsvirkelighetKrav og kontraktUsikkerhetForretningskonsekvensForsvarlig beslutningDet som gjør vurderingen troverdigUavhengighetEngineeringStandarderIndustriell erfaringFaglig nettverk
Beslutningen må ta hensyn tilFysisk konsekvensCyberrisikoTekniske begrensningerDriftsvirkelighetKrav og kontraktUsikkerhetForretningskonsekvensForsvarlig beslutningDet som gjør vurderingen troverdigUavhengighetEngineeringStandarderIndustriell erfaringFaglig nettverk

Lumiar-synteseLumiar
LUMIAR MODEL · DECISIONS

The defensible decision

A defensible decision can explain its assumptions, evidence, and reasoning, and it holds up when challenged.

The decision must account forPhysical consequenceCyber riskTechnical constraintsOperational realityRequirements and contractUncertaintyBusiness consequenceDefensible decisionWhat makes the assessment credibleIndependenceEngineeringStandardsIndustrial experienceProfessional network
The decision must account forPhysical consequenceCyber riskTechnical constraintsOperational realityRequirements and contractUncertaintyBusiness consequenceDefensible decisionWhat makes the assessment credibleIndependenceEngineeringStandardsIndustrial experienceProfessional network

Lumiar synthesisLumiar

Values in practice

Partnership and relationships
We work in close collaboration with our clients and peers, over time. Good advice is built on relationships where people know and trust each other.
Independence
We do not sell technology and have no product ties. Our advice stands on its own.
Read the full independence policy →
Confidentiality
Facility data is handled under NDA. Confidentiality is handled by agreement with each client.
Standards grounding
Our work builds on IEC 62443, IEC 61511, and ISA-TR84.00.09 for the interplay between cybersecurity and functional safety, NAMUR NOA for data flow and AI, and Offshore Norge 104 on the Norwegian continental shelf. We take part in standardization through NEK NK 65. We follow the regulatory development in NIS2, CRA, and CER closely.

Expertise and delivery model

Lumiar leads selected engagements with senior expert involvement throughout the delivery. When an issue requires expertise across disciplines, we can work with relevant specialists and professional communities. Roles, responsibilities, confidentiality, and commercial interfaces are clarified with the client before start-up.

We also take an active part in standardization, teaching, conferences, and professional forums. This keeps us in continuous contact with developments in industry, technology, and regulation, and makes it easier to challenge our own assessments against other strong professional communities.

Publications and coverage

Reports, opinion pieces, interviews, and podcasts are collected under Perspectives.

For procurement and contracts

This section is written for buyers and contract managers and can be linked directly from tender documents.

Org. no.937 785 836
Business addressStavanger, Norway
InsuranceOccupational injury and liability insurance through Gjensidige
Staffing agencyApproved staffing agency, registered with the Norwegian Labour Inspection Authority. See the register
StandardsIEC 62443 · NEK NK 65 (Norwegian mirror committee for IEC TC 65)
ConfidentialityPlant data is handled under non-disclosure agreements. Confidentiality is agreed with each client.
IndependenceNo product ties. See the independence policy.
ReferencesAvailable on request.

Do you have a specific need, or just a question?

Tell us briefly about your needs, and we’ll take it from there.

Talk to us about an engagement