Banedanmark

Denmark · owned by Danish Ministry of Transport (Transportministeriet) (Denmark) · bane.dk · 34 vendors

Banedanmark is the Danish state railway infrastructure manager responsible for maintaining, operating, and developing the national rail network. It oversees more than 3,500 km of tracks, manages daily train traffic for approximately 196 million passengers and 8 million tonnes of freight per year, and is currently leading a major programme to electrify and modernise the Danish railway with new signals and a new rail corridor to Europe. It operates as a government agency (styrelse) under the Danish Ministry of Transport.

Resilience scores

Technology vendors

Services catalogue

1 service in catalogue across 1 category; runs on 34 sub-vendors.

Insights

Last updated 2026-08-18 · revision 19

34 direct vendors, 395 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 4/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Banedanmark demonstrates medium-low migration readiness. A primary challenge is the significant reliance on 'worn-out legacy analogue signalling infrastructure' that is currently undergoing replacement. This indicates a substantial legacy technology footprint that is not inherently cloud-native or microservices-oriented, posing a major hurdle for migration to modern cloud environments. Strict regulatory compliance under NIS2 as an 'Essential Entity' and likely Danish/EU data residency requirements for critical infrastructure data will impose significant constraints on cloud provider selection, data location, and architectural design, increasing the complexity and cost of any migration. The explicit data point 'Total Vendors: 0' is contradictory to 'Total Services: 88' and the listed vendor countries. If 'Total Vendors: 0' were accurate, it would imply minimal vendor lock-in, which would be a significant advantage for migration readiness. However, assuming the presence of vendors for the 88 services, the specific number of vendors and the associated lock-in risk remain unknown, which could present challenges during a large-scale migration. On the positive side, Banedanmark's stable revenue from government appropriations provides a strong financial foundation to fund necessary modernization and migration initiatives. The ongoing project to replace legacy signalling with a new digital system (ETCS/ERTMS) demonstrates a clear commitment and capacity for large-scale technological transformation, which is a positive indicator for future migration efforts.

Compliance

10 in-scope frameworks identified; showing 3.

Danish Public Administration Act — Compliant

As a Danish state agency (statslig styrelse), Banedanmark is fully subject to the Danish Public Administration Act (Forvaltningsloven) and the Freedom of Information Act (Offentlighedsloven). These laws govern case handling, access to public records, and administrative procedures. Banedanmark's privacy policy explicitly references Offentlighedsloven § 15(1) for journalization obligations and Forvaltningsloven § 7(2) for referral of misdirected inquiries. Risk is Low as these are standard public administration obligations with well-established compliance practices.

Evidence: https://bane.dk/da/Privatliv, https://bane.dk/da/Om-Banedanmark, https://www.retsinformation.dk/eli/lta/2014/433, https://www.retsinformation.dk/eli/lta/2013/606

NIS2 (source) — Assessment Required

Banedanmark is the Danish national railway infrastructure manager, responsible for operating and maintaining Denmark's entire state railway network (over 3,500 km of track), managing train traffic control, and enabling the transport of approximately 196 million passengers and 8 million tonnes of freight annually. The transport sector — specifically rail transport — is explicitly listed as an Essential Entity sector under Annex I of NIS2 Directive (2022/2555). Banedanmark far exceeds the size thresholds (2,500+ employees, state-owned entity with significant public budget). As a critical national infrastructure operator under the Danish Ministry of Transport, Banedanmark is almost certainly designated as an Essential Entity under NIS2 as transposed into Danish law (Lov om sikkerhed i net- og informationssystemer, implemented by the Danish Centre for Cyber Security / CFCS). Risk is rated High because: (1) NIS2 non-compliance for Essential Entities carries fines up to €10 million or 2% of global annual turnover; (2) rail infrastructure is explicitly named in NIS2 Annex I; (3) a cybersecurity incident affecting Banedanmark's systems (train control, signalling, ERTMS) could have severe national safety and economic consequences; (4) Denmark's CFCS actively supervises critical infrastructure operators. The status is 'Assessment Required' because no public NIS2 compliance certificate or formal designation document was found.

Evidence: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32022L2555, https://www.cfcs.dk, https://bane.dk/da/Leverandoer/Adgang/Adgang-til-Banedanmarks-It_systemer, https://bane.dk/da/Om-Banedanmark/Sikkerhed, https://www.retsinformation.dk/eli/lta/2022/1655

EU Drone Regulation — Assessment Required

Banedanmark actively manages drone operations near railway infrastructure, with dedicated pages on drone awareness and contractor drone access. The organization has published guidance on drone observations near the railway network. Risk is Medium as unauthorized drone operations near railway infrastructure pose safety risks, and Banedanmark must comply with EU drone regulations regarding its own operational use of drones for infrastructure inspection.

Evidence: https://bane.dk/da/Leverandoer/Adgang/Droner, https://bane.dk/da/Leverandoer/Adgang/Opmaerksomhed-ved-observationer-af-droner

Financials

Three-year financials

Financial Resilience Score: 9/10

Banedanmark benefits from an exceptionally strong financial position due to its status as a Danish state-owned railway infrastructure manager operating as a government agency (styrelse) under the Ministry of Transport. Revenues are effectively guaranteed through the Danish Finance Act (Finansloven), with appropriations, track access charges, and services to Femern Landanlæg A/S providing stable funding. There is no counterparty credit or market-demand risk in a commercial sense. The infrastructure balance sheet is very large and well-capitalised at approximately DKK 65.4 billion in 2024, financed by the Danish state. The agency has consistently delivered under-spends against its appropriation, with operating surpluses of DKK 27m, 73m, and 49m in 2022, 2023, and 2024 respectively, demonstrating reasonable budget discipline. Banedanmark is ISO 27001 certified (recertified December 2024) and working toward ISO 55001 certification by 2027. The line of credit facility of DKK 433m in 2024 is only 67% utilised, providing additional financial flexibility. Key risks relate to project execution rather than financial solvency: cost overruns and delays on major capital programmes (notably the Signal Programme now extended to 2033 completion), partial achievement of forecast quality targets, aging legacy signalling systems, climate exposure (storms, extreme rain, embankment failures), and large contractual liabilities of DKK 5.28 billion at end-2024. Dependency on a small number of major contractors (Alstom for signals; Strukton for Lolland track works) presents concentration risk on the delivery side.

Key strengths: State-owned agency funded through the Danish Finance Act with guaranteed revenue streams, Very large infrastructure balance sheet (~DKK 65.4bn in 2024) financed by the Danish state, Consistent operating surpluses vs. appropriation (DKK 27m/73m/49m in 2022-2024), ISO 27001 certified; working toward ISO 55001 asset management certification by 2027, Credit facility only 67% utilised (DKK 433m limit in 2024), Infrastructure assets grew +8.7% from 2022 to 2024 reflecting large ongoing investments

Risk factors: Cost overruns and delays on major capital programmes (Signal Programme pushed to 2033), Forecast quality targets only partially met (5/8 within tolerance in 2024), Aging legacy signalling systems causing punctuality issues, Climate exposure - storms, extreme rain and embankment failures affecting operations, Large contractual liabilities of DKK 5.28bn at end-2024, Contingent liabilities rose to DKK 20.9m at end-2024 due to expropriation cases, Dependency on small number of major contractors (Alstom, Strukton)

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report