Lumiar
ABOUT LUMIAR

We help industry see risk clearly

Lumiar is an independent OT security consultancy based in Stavanger, Norway. Norway is our home market, and we take on remote assignments outside Norway.

Why Lumiar exists

Industrial control systems are being connected ever more tightly to IT and the outside world. The risk is real, but manageable for those who see clearly. Lumiar was started to give industry advice that is professionally solid, independent of vendor interests and possible to implement in practice.

The name comes from the Latin lumen, meaning light. That sums up our job: to shed light on risk, architecture and barriers so you can make good decisions.

Values in practice

Partnership and relationships
We work as a partner, not just a supplier: close collaboration with our clients and peers, over time. Good advice is built on relationships where people know and trust each other.
Independence
We do not sell technology and have no product ties. Our advice stands on its own.
Confidentiality
Facility data is handled under NDA. Confidentiality is handled by agreement with each client.
Standards grounding
Our work builds on international best practice, such as IEC 62443 and adjacent standards, and we take an active part in the standards work. We follow the regulatory development in NIS2, CRA and CER closely.

A professional community, not just a firm

We believe good advice gets better in community. Around Lumiar is a network of clients, colleagues and peers in Norway, the Nordics and worldwide. Courses, conferences, seminars and standards work are the formal meeting places. Just as important is the informal side: gatherings, meetups and channels, between people who know each other and enjoy working together and exchanging experience, formally and informally.

The network is also a strong practical resource. Large and long-running assignments can require more specialists than us. Then we bring in or recruit the right competence before delivery starts. We are also happy to make introductions and build bridges between communities that ought to be talking.

About Kenneth Titlestad, founder of Lumiar
WHAT THE COMMUNITY CONTRIBUTES
Ideas and input to Lumiar
Review rounds for standards, documents, reports and more, circulated in a strong national and international professional network
Professional statements
Support in tender work
Introductions and bridge-building between communities
Development and adaptation of methods, processes, management systems, tools and checklists, fitted to the business, the context and the culture. Something that works.

Publications and media

Reports, op-eds, interviews and podcasts we have been central to, some in earlier engagements and roles before Lumiar was founded. All links go to the original publishers.

REPORT · HAVTIL (NORWEGIAN OCEAN INDUSTRY AUTHORITY) · 2022
Protection of data at rest and in transit
Project report for the Norwegian Ocean Industry Authority on protecting data at rest and in transit in the petroleum sector: complex supply chains, risk ownership and governance. In Norwegian.
Open →
OP-ED · EUROPOWER
How can IT and OT deliver value together in the energy sector?
On the interplay between IT and OT communities in energy companies. In Norwegian.
Open →
OP-ED · DIGI.NO
Human vulnerabilities are raising the threat level
On people as part of the industrial attack surface. In Norwegian.
Open →
ARTICLE · TEKNISK UKEBLAD
Oil and gas: the pace of security work must pick up quickly
On the status and pace of security work on the Norwegian shelf. In Norwegian.
Open →
ARTICLE · TEKNISK UKEBLAD
The oil and gas industry is poorly prepared for digital attacks
Coverage of a report on the industry’s digital preparedness. In Norwegian.
Open →
PODCAST · THE INDUSTRIAL SECURITY PODCAST · 2025
Credibility, Not Likelihood (episode 140)
On credibility rather than likelihood in risk assessment of high-consequence attacks, with the Norwegian shelf as the backdrop. In English.
Open →
PODCAST · ENERWE
OT in the energy sector is a target
Conversation on the threat picture against energy control systems. In Norwegian.
Open →
INTERVIEW · STAFFHOST DIGITAL · 2025
Cybersecurity Q&A
Interview on industrial cybersecurity and the path into the field. In English.
Open →
ARTICLE · TEKNA
Can hackers poison our food?
On cybersecurity in food production, connected to the course work. In Norwegian.
Open →

For procurement and contracts

This section is written for procurement and contract managers, and can be linked directly from tender documents.

ORG. NO.
937 785 836
REGISTERED ADDRESS
Stavanger, Norway
INSURANCE
Occupational injury and liability insurance through Gjensidige
STANDARDS AFFILIATION
IEC 62443 · Norwegian standards work (NEK)

Do you have a specific need, or just a question?

You will get a reply shortly.

Book an introductory call
post@lumiar.no +47 94 15 15 89