Cybersecurity and compliance for products people depend on.
Damschen Systems AB is the independent consultancy of Dr. Marvin Damschen. I help organisations that develop software-intensive products meet regulations like the Cyber Resilience Act and NIS 2, and standards like IEC 62443, ISO 21434 and ISO 26262. It is my goal to make the requirements work in practice, not just on paper.
Services
Most engagements touch one or more of the areas below. Some clients book a single workshop, others bring me in for months at a time. We scope it together.
Threat modelling & risk assessment
Structured analysis of your system, embedded, IT, OT or cloud-connected, using methods such as STRIDE. Facilitated workshops with your team, documented risks, and concrete mitigations that feed straight into your product requirements.
Gap analysis & audits
Independent review of development processes and products, e.g., against IEC 62443-4-2, ISO 21434, ISO 26262 and ASPICE, resulting in a prioritised improvement plan developed together with you. Not just a list of findings.
Regulatory readiness
Practical support for the Cyber Resilience Act, NIS 2, the EU Machinery Regulation and other regulations: what actually applies to your products, what to document, and how to set up SBOM handling and vulnerability reporting.
Process implementation
Hands-on help writing and introducing development processes your engineers will actually follow, e.g., threat modelling, vulnerability analysis, or software tool management and qualification.
Training & workshops
Tailored sessions from cybersecurity basics to hands-on execution, e.g., SBOM scanning and threat modelling. I also have experience creating self-study courses.
Safety & security of embedded systems
In real products, functional safety and cybersecurity rarely live apart. I help you handle ISO 26262 and ISO 21448 alongside your security work, including early AI-safety practice (ISO PAS 8800).
R&D & innovation projects
Support in research and innovation projects: from idea and funding application to execution and technical validation. I have led EU- and Vinnova-funded projects with budgets above €1M and teams of 15+, often delivering working prototypes along the way.
Who you'll be working with
I’m Marvin Damschen, the consultant behind Damschen Systems AB. I hold a Ph.D. in computer science from Karlsruhe Institute of Technology (KIT) and have spent more than a decade with the security and safety of embedded, software-intensive systems; first in research at KIT and RISE, then as Cybersecurity Team Lead at the consultancy Evidente, now under my own name.
The work has always been hands-on. At RISE, my teams built prototypes such as the automation for the electric tractor “Drever 120”, demonstrated live to EU agriculture ministers, and a drone system for firefighting on ro-ro ships. As a consultant, I have audited engineering processes at automotive suppliers, threat-modelled cloud-connected industrial systems as well as machinery, and built and delivered training on the Cyber Resilience Act. I also take part in standardisation through the SEK TK 65 committee (IEC 62443, EN 40000-1), initiated the open-source projects WayWise and WayWiseR, and my research, from cybersecurity risk assessment of virtually coupled trains to the path toward CE-marked autonomous forestry machines, has resulted in more than twenty peer-reviewed publications (more details on my personal webpage).
I work with smaller companies meeting cybersecurity requirements for the first time as well as large organisations with mature processes. For the former, the question is usually “what do we actually need to do, and in what order?” For the latter, it’s typically independent analyses, audits or specialist support that integrates into existing structures. I thrive in both contexts.
Background
A short version. The full CV is available on request.
- 2026 –Damschen Systems AB Founder & Senior Cybersecurity and Compliance Consultant
- 2025 – 2026Evidente Cybersecurity Team Lead & Technical Management Consultant
- 2020 – 2025RISE Research Institutes of Sweden Senior Researcher, later Research Lead, Dependable Transport Systems
- 2014 – 2019Karlsruhe Institute of Technology (KIT), Germany Researcher, Chair for Embedded Systems · Ph.D. (Dr.-Ing., magna cum laude)
Contact
The easiest way to start is a short e-mail. Feel free to reach out, and we'll take it from there.
Phone
+46 760 06 44 03Location
Borås, SwedenOn site or remote