Styrelsen for Samfundssikkerhed (Danish Resilience Agency) Due Diligence

Run due diligence on Styrelsen for Samfundssikkerhed (Danish Resilience Agency): check compliance and get alerts when suppliers or ownership change.

Denmark · owned by Ministeriet for Samfundssikkerhed og Beredskab (Ministry of Resilience and Preparedness) (Denmark) · cfcs.dk · 9 vendors

Styrelsen for Samfundssikkerhed (the Danish Resilience Agency) is a Danish government agency tasked with strengthening Denmark's resilience against threats ranging from extreme weather to sabotage and cyberattacks. It provides guidance and communication to public authorities, businesses, and citizens on preventing and managing societal threats, including cybersecurity, crisis management, and emergency preparedness. The agency operates under the Ministry of Resilience and Preparedness (Ministeriet for Samfundssikkerhed og Beredskab) and employs approximately 250 staff, headquartered in Birkerød, Denmark.

Resilience scores

Technology vendors

Insights

Last updated 2026-10-22 · revision 3

9 direct vendors, 99 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Compliance

10 in-scope frameworks identified; showing 3.

SOC 2 (source) — No public evidence

SOC 2 is a voluntary assurance framework focused on service organizations' controls, primarily used in a commercial context to build customer trust. It is not applicable to a government national security authority.

Lov om sikkerhed og beredskab i telesektoren — Evidence found

This law designates the national cybersecurity authority as the supervisor for security and resilience in the Danish telecommunications sector, a role fulfilled by CFCS and now its successor agency.

Evidence: https://mssb.dk/ministeriet/styrelsen-for-samfundssikkerhed/, https://samsik.dk/nis2/overview-of-competent-authorities/, https://samsik.dk/tele/, https://www.jurabibliotek.dk/lov-om-sikkerhed-og-beredskab-i-telesektoren/kapitel/1, https://gdpr.dk/nis2-telesektoren/

CER Directive (source) — Evidence found

As the national cybersecurity authority, CFCS is a key state actor in the ecosystem of critical entity resilience, providing threat assessments that inform the application and supervision of the CER Act.

Evidence: https://kpmg.com/dk/da/indsigter/risici-og-regulering/the-eu-critical-entities-resilience-directive.html, https://gorrissenfederspiel.com/en/danish-implementation-of-the-eu-critical-entities-resilience-act/, https://dbifire.com/services/security-resilience/cer-directive/, https://mssb.dk/ministeriet/styrelsen-for-samfundssikkerhed/, https://kpmg.com/dk/en/insights/risk-and-regulation/the-eu-critical-entities-resilience-directive.html, https://www.critical-entities-resilience-directive.com/Transposition/Denmark.html

Financials

Three-year financials

Financial Resilience Score: 9/10

Styrelsen for Samfundssikkerhed (SAMSIK) is a Danish government agency funded directly through the state budget (finansloven) under § 13.21.01. As a statutory government body, it cannot become insolvent in the commercial sense—its funding is renewed annually by the Folketinget and is backed by a strong multi-year political commitment to societal security and emergency preparedness. The 2026 proposed appropriation of DKK 237.4M represents a +21.6% YoY increase, reflecting significant political tailwind. The agency benefits from mandate expansion as the designated competent authority for NIS 2, CER, and telecom security legislation, giving it durable statutory relevance. Additional funding is secured through multi-year agreements including the January 2025 emergency-preparedness agreement (DKK 11.7M/year through 2033) and the Defence Agreement 2024-2033 (Arctic/North Atlantic sub-agreement). EU co-funding for the rescEU medical/PPE stockpile (up to DKK 446M over 2020-2027) further reduces net domestic cost. SAMSIK opened 2025 with a positive equity position of DKK 30M inherited from predecessor CFCS, providing modest working-capital flexibility. The parent ministry's total appropriation grew 27% cumulatively from 2023 to 2026, with a dedicated DKK 500M/year frame earmarked for 2026-2029. The primary risks are not financial solvency but rather reorganisation complexity (the agency is less than two years old), political renewal risk tied to multi-year agreements, and operational/reputational risk given elevated cyber threat levels against Denmark.

Key strengths: Statutory funding through Danish state budget (finansloven) - cannot become insolvent, +21.6% YoY appropriation increase to DKK 237.4M proposed for 2026, Strong political backing with DKK 500M/year dedicated frame for societal security 2026-2029, Mandate expansion as competent authority for NIS 2, CER, and telecom security, EU co-funding of up to DKK 446M for rescEU stockpile through 2027, Positive opening equity of DKK 30M at start of 2025, Multi-year funding agreements through 2033 (Defence Agreement, emergency preparedness)

Risk factors: Dependency on annual appropriations and political coalition continuity, Reorganisation and integration risk - agency only operational since 29 January 2025, FTE line fluctuations (167 in 2025 → 109 in 2026 → 179 in 2027) indicate transition complexity, Statens Indkøbsprogram (19th phase) imposes small recurring cuts, Historical budget pressure on predecessor CFCS affected operational quality, High operational/reputational exposure due to elevated Russian cyber threat level, Multi-year funding agreements expire in 2026 or 2033 creating renewal risk

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report