01
Deals stalling on security reviews
Enterprise customers send 200-question security questionnaires. Your CTO burns weekends on them. Answers still aren't good enough to close. And now they're asking about your AI practices too.
Senior IT, Security & AI Leadership. For growing companies.
Your company is growing. Your IT, security, and AI need a leader.
One accountable person for your IT, security, compliance, cloud, and AI governance, instead of three hires or a rotating consultancy. Fifteen years running these functions, from growing companies to enterprise scale.
Currently taking new retainer engagements.
The situation
You've outgrown "figure it out as we go."
B2B SaaS, FinTech, HealthTech: your company sells to enterprises or operates in regulated markets. IT governance, security, and AI can't be afterthoughts, but an in-house security leader runs 115-130K DKK/month all-in (base, pension, holiday, bonus) plus 5-9 months from search to effective contributor.
02
Compliance is consuming leadership time
ISO 27001, NIS2, EU AI Act, the board wants answers. Consultancies quote six figures and six months. Nobody internally can scope the real work or connect the dots between security, compliance, and AI.
03
Your team is using AI everywhere and nobody's governing it
ChatGPT, Copilot, and probably three other tools you don't know about. No policy, no oversight, no idea what company data is going where. A customer just asked about your AI practices and your CTO had to wing it.
Results
What this looks like in practice.
Real engagements, anonymised. Scope defined upfront, outcome measured at the end. The work spans ISO 27001, SOC 2, NIS2, DORA, and EU AI Act.
01
Danish SaaS company: ISO 27001
ISO 27001 certified in 4 months (single-site, narrow scope)
Trigger. A Danish SaaS company was losing traction in enterprise sales because buyers kept asking for ISO 27001 certification they didn't have.
Work. Ran a structured readiness assessment to identify the gaps, then provided ongoing advisory covering policy development, risk assessment setup, and a realistic certification roadmap.
Result. Roadmap and gap analysis complete in 8 weeks. Certified in 4 months from engagement start (single-site, narrow scope). Three enterprise deals that had been sitting in pipeline for 3+ months moved to contract within weeks of certification.
- 4 mo
- To certified
- 3 deals
- Unblocked
02
Software company: Questionnaires (one engagement)
One engagement: questionnaire time from 10-15 hours to under 2
Trigger. Senior engineering time was being consumed by customer security questionnaires, in this case 10-15 hours per questionnaire.
Work. Built a structured answer library, standardised responses, and created a repeatable process for future questionnaires.
Result. In this engagement, the answer library covered roughly 85% of incoming questions and engineering reclaimed about 30 hours per month. Individual result; your starting point and scope will differ.
- <2 hrs
- Per questionnaire
- 30 hrs
- Back per month
03
FinTech company: Security questionnaires (one engagement)
Security review pass rate from 40% to 95%
Trigger. Enterprise customers were sending detailed security questionnaires. The company was failing roughly 60% of them. Each review consumed 15-20 hours of CTO and engineering time, and two key renewals were at risk.
Work. Audited all questionnaire responses to identify recurring failure points. Built a structured response library covering the 200 most common questions with evidence references. Established an evidence discipline and triage process.
Result. Judged by the customers' own security teams, pass rate went from roughly 40% to 95% over three months, counting conditional passes as fails at both ends. CTO time on reviews dropped about 60%, and both at-risk renewals closed. Individual result; your starting point and scope will differ.
- 95%
- Pass rate
- 60%
- Less CTO time
These are anonymised because most clients are under NDA. If you need something to take to your board, I will put you on a confidential reference call with a client whose situation mirrors yours, before you commit. Ask in the scoping call or email bm@accelcomply.com.
Engagements
Fixed scope and fixed price, agreed before you sign.
Every engagement starts with a fixed-fee baseline. Not a vague discovery. You see exactly what you're getting before committing to anything ongoing.
Fast Track
Security Questionnaire Sprint
45,000 DKK. Fixed fee. 10 business days.
For one specific situation: an enterprise deal stalled on a customer security questionnaire and your CTO is losing weekends trying to answer it. You forward the questionnaire, I draft answers with an evidence library you keep, your CTO reviews, the answers go back to your prospect. The same library answers the next one in hours instead of days.
- Review of up to 2 customer security questionnaires (SIG Lite, CAIQ, custom)
- Drafted answers with source evidence mapped to your existing controls
- Reusable evidence library (Notion or your platform of choice)
- One working session with your sales team on how to handle the next one
Entry point
Readiness Assessments
25-35,000 DKK. Fixed fee.
ISO 27001 / SOC 2 readiness, Cloud Cost Review, or Customer AI Readiness. Each is fixed-fee, fixed-scope, delivered in 5-10 business days. Clear picture, prioritised roadmap, decision point.
Backed by a guarantee
Cloud Cost Review carries a 2x-savings-or-refund guarantee.
- ISO 27001 / SOC 2 Readiness Assessment (25-35K DKK fixed)
- Cloud Cost Review tiered by cloud spend (25 / 50 / 100K DKK) with 2x-savings-or-refund guarantee
- Customer AI Readiness (25-30K DKK standard); AI Questionnaire Sprint (45K DKK) for when a customer is asking about your AI practices and needs a full answer
- Written report with prioritised 90-day action plan
Ongoing
Standard Retainer
Typical engagements 40-75K DKK/month
Senior leadership time covering IT strategy, security, compliance, cloud, and AI governance. Bi-weekly sessions, async availability, and ownership of the things your CTO shouldn't own. Scope and fee agreed in the scoping call. Billed quarterly. 10% discount for prepaid quarters.
- IT, security & AI governance under one accountable owner
- Compliance program management (ISO 27001, SOC 2, NIS2, EU AI Act)
- Cloud oversight and FinOps discipline
- Executive reporting and board communication
- Security questionnaire handling included (typical scope 2-4 customer questionnaires per quarter; higher volumes scoped separately as a sprint). I run them; your engineers stay on product.
Expanded tier
Executive Retainer
70-120K DKK/month
When nobody in the company owns the full risk across IT, security, and AI governance, and it shows in board conversations, audit findings, or vendor reviews. Broader scope for larger growing companies, PE-backed, or running several compliance programmes at once. Board-prep blocks and quarterly strategic reviews included.
Behzad Motaghi
Founder, Accel Comply
About
Who is in the chair.
I started Accel Comply because I kept seeing the same pattern: growing companies hitting IT, security, and AI governance walls they weren't staffed to handle. The available options (big consultancies, premature full-time hires, or just ignoring it) didn't fit. So I built something that does.
15+ years in IT and security leadership across the Nordics and EEA. IT, security, and AI mandates spanning growing companies through enterprise scale. Includes interim CIO work at a PE-backed group and AI diligence for PE portfolios. Led a Nordic cloud engineering team of 15 at Innofactor and built and scaled cloud and security consulting practices at Crayon and Sentia.
Azure Solutions Architect Expert | PRINCE2 PractitionerCertificate IDs on request→
View LinkedIn profile→Common concerns
Questions worth asking.
01
Is one person really enough?
One accountable person, not one generalist. I go deepest on ISO 27001, NIS2, and AI governance, and I have run IT, security, and cloud programmes from growing companies up to enterprise scale. Where a job needs a true specialist (penetration testing, an audit opinion, deep DORA legal), I scope it and bring the right one in, so you still manage one relationship. The person who scopes the work does the work.
02
What if you are not available?
Everything I build lives in your own tenancy from day one, so your team is never locked out. Short planned absences are handled async, with escalation paths in the contract. When an engagement needs a guaranteed backstop, an optional cover names a vetted Nordic CIO/CISO peer at signature, with a one-business-day response and a five-business-day takeover. Professional indemnity insurance is DKK 5M as standard.
03
How is this different from a consultancy?
No team rotation, no junior handoffs, no surprises three weeks in. You know exactly who does the work, and the price, before you sign. Fixed-fee assessments to start, and retainers scoped to your problem rather than sold from a menu.
04
Will you pass my own security review?
Yes, put me through it. Your data and evidence stay in your own tenancy; I hold only what an engagement needs, under NDA by default, and to the same security baseline I would set for you. Professional indemnity insurance is DKK 5M as standard, and I complete your vendor security questionnaire like any other supplier you onboard.
Remote-first, with on-site capacity across Denmark and the broader Nordic region. DKK is the standard invoicing currency; EUR can be accommodated when needed. Working languages are Danish (native) and English (professional fluent). Engagements across the Nordics and EEA run without language or invoicing friction.
Frameworks
- ISO 27001
- SOC 2
- NIS2
- EU AI Act
- CIS Controls
- NIST CSF
- DORA
Next step
Let's work out what you actually need.
30-minute scoping call. Free and non-binding. One live trigger is enough to start. If it's not a fit I'll tell you, and point you somewhere that is.
Typically responds within 24 hours