# CAG Group

> Clarifo company profile — qualitative business description generated from
> the company's filings. Financial statements, charts and ratios are
> available on Clarifo (https://www.clarifo.com/en/companies/caggroup).

## Overview

CAG Group is a Swedish IT consulting group organized through independent operating subsidiaries under a common brand. The company provides technology management, systems development, cyber security, operations and maintenance, and training services, with a strong focus on public-sector and regulated-industry clients in Sweden.

## Products & services

• Technology management consulting
• Systems development and integration
• Cyber security solutions
• Operations and application maintenance
• Training and knowledge transfer

- **Technology Management** (25%) — Advisory and implementation support for IT strategy, governance, and transformation.
- **System Development** (30%) — Custom software development, integration, and delivery of business-critical systems.
- **Cyber Security** (15%) — Security consulting and solutions for protecting systems, data, and digital operations.
- **Operations & Maintenance** (20%) — Run and maintain IT environments, applications, and related support services.
- **Training** (10%) — Education and capability-building services tied to technology and system use.

- Technology management consulting
- Systems development and integration
- Cyber security solutions
- Operations and application maintenance
- Training and knowledge transfer

## Customers

CAG sells mainly to organizations that need specialized IT expertise for mission-critical environments, especially in defense, banking and finance, industry and infrastructure, and trade and services. The company also serves healthcare and public-sector-related use cases where security, reliability, and implementation quality matter. Customers buy CAG’s services to access niche expertise, deliver complex projects, and operate secure digital systems.

- **Defense** (primary) — Buys secure systems, consulting, and specialist delivery for sensitive environments.
- **Bank & Finance** (primary) — Buys systems development, cyber security, and financial crime prevention expertise.
- **Industry & Infrastructure** (primary) — Buys technology and operations support for industrial and infrastructure systems.
- **Trade & Services** (secondary) — Buys consulting and development services for commercial digital operations.
- **Healthcare** (secondary) — Buys secure and reliable IT services for healthcare-related digital workflows.

- Defense organizations needing secure, specialized IT delivery
- Banks and financial firms needing systems and compliance support
- Industrial and infrastructure clients modernizing core operations
- Trade and services companies running business-critical platforms
- Healthcare and public-sector users needing reliable digital systems

## Geography

CAG is primarily a Sweden-based business, with operations and offices across several Swedish cities and an additional presence in Oslo. The company’s footprint is concentrated in the Nordic region, and its service delivery is tied to local customer relationships and on-site consulting work. Geography matters because the business depends on proximity to clients, local regulatory requirements, and access to specialized talent.

- Sweden is the core operating market and main revenue base
- Offices include Stockholm, Enköping, Uppsala, Linköping, Karlstad, Borås, and Krokom
- Oslo provides a small non-Swedish Nordic presence
- Local delivery supports customer intimacy and project execution
- Nordic concentration ties demand to Swedish public and private clients

## Strategy

CAG’s strategy is to combine deep specialist expertise with breadth across several IT service areas, allowing it to handle both targeted assignments and larger transformation projects. The group emphasizes decentralized subsidiaries, close customer relationships, and delivery in regulated and security-sensitive environments. Its positioning is built around trusted expertise in digitalization, cyber security, and mission-critical systems.

- **Strengthen specialist consulting breadth** (medium-term) — Breadth across technology management, development, security, and operations supports cross-selling and larger engagements.
- **Focus on regulated and mission-critical customers** (medium-term) — Defense, finance, and public-sector-adjacent clients value security, reliability, and domain expertise.
- **Deliver secure digitalization and implementation quality** (short-term) — The company competes on the ability to execute projects smoothly and maintain customer trust.

- Deepen specialist expertise in high-value consulting niches
- Use decentralized subsidiaries to stay close to customers
- Win complex projects that require both strategy and implementation
- Expand secure digitalization capabilities for regulated clients
- Maintain breadth across multiple service lines and end markets

## Risks

CAG’s main risks stem from dependence on skilled consultants, customer retention, and execution quality in complex projects. The business is also exposed to cyber security, compliance, and reputational risks because it serves defense, finance, and other sensitive clients. Like other consulting firms, it faces utilization risk, wage inflation, and competition for scarce specialist talent.

- **Talent scarcity and consultant retention** [high] — The business value is created by specialized employees, so attrition or hiring difficulty directly affects delivery capacity.
- **Cyber security and data handling failures** [high] — CAG works with security-sensitive clients and systems, so any breach could damage trust and contract wins.
- **Project delivery and implementation risk** [medium] — Fixed-scope or complex assignments can create cost overruns, delays, or customer dissatisfaction.
- **Regulatory and anti-corruption compliance** [high] — A large share of revenue comes from public-sector-related and regulated customers, increasing compliance expectations.

- Dependence on scarce specialist consultants and retention
- Project execution risk in complex customer implementations
- Cyber and compliance exposure in sensitive client environments
- Reputational risk from service quality or security incidents
- Competition for talent can pressure delivery capacity

## Accounting

CAG’s revenue mix includes time-and-materials consulting, fixed-price projects, and some software resale, so revenue recognition depends on contract type and project progress. Lease accounting is relevant because the group uses office and vehicle leases, while goodwill and intangible asset impairment may matter if acquisitions are part of the group structure. Investors should also watch estimates around accrued revenue, project margins, and any provisions tied to customer contracts or lease commitments.

- **Revenue recognition by contract type** — Quarterly revenue and margin comparability
- **IFRS 16 lease accounting** — Balance sheet and operating profit presentation
- **Accrued income and project estimates** — Revenue, receivables, and working capital
- **Goodwill impairment** — Non-cash write-down risk

- Revenue recognition differs between hourly work and fixed-price projects
- Project progress and accrued revenue can affect quarterly timing
- IFRS 16 lease accounting affects assets, liabilities, and EBITDA-like metrics
- Goodwill and acquisition-related intangibles may require impairment testing
- Accruals and provisions can move with project delivery and contract estimates

---

*Last updated: 2026-08-11T04:04:51.423346+00:00*
