ELCON

Denmark · owned by NRGI A.M.B.A. (Denmark) · elcon.dk · 4 vendors

ELCON is a Danish company specializing in electrical installations, automation, and service for various sectors including industry, infrastructure, and buildings.

Resilience scores

Technology vendors

Insights

Last updated 2026-09-13 · revision 3

4 direct vendors, 143 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 2/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

ELCON's migration readiness is assessed as low. The primary challenge stems from its core reliance on Operational Technology (OT) systems such as PLC, SCADA, and Building Management Systems (BMS). These systems are typically deeply integrated with physical infrastructure, often proprietary, and have real-time operational constraints, making them exceptionally difficult to migrate to modern cloud-native, containerized, or microservices architectures. Such a migration would likely require extensive re-engineering, specialized hybrid solutions, and significant capital investment. The regulatory environment, particularly the impending NIS2 assessment, will impose stringent cybersecurity and operational continuity requirements on any migration, adding substantial compliance overhead and complexity. Data residency requirements are not specified, but for an EU company operating in critical sectors, these are likely to be a factor, further complicating cloud migration strategies. Critical financial data (revenue concentration, growth history) is missing, making it impossible to assess ELCON's financial capacity to fund a potentially expensive and complex migration. The 'Vendor Lock-in Risk' is unknown, but for specialized OT systems, vendor lock-in is typically high due to proprietary hardware, software, and specialized expertise, posing a significant barrier to migration flexibility. No specific opportunities for easier migration are evident from the provided data.

Compliance

7 in-scope frameworks identified; showing 3.

ISO 27001 (source) — Assessment Required

ISO 27001 is not legally mandatory but is increasingly expected in the energy sector due to cybersecurity risks and customer expectations. Energy companies handle critical infrastructure and sensitive data, making information security management important. Risk is medium as it affects business competitiveness and may be required by some customers or partners.

EU Energy Efficiency Directive — Assessment Required

Energy companies in the EU are subject to energy efficiency requirements and reporting obligations. Non-compliance can result in regulatory penalties and operational restrictions. This is a core regulatory requirement for energy sector operations in Denmark.

ISAE 3000 (source) — Assessment Required

ISAE 3000 is primarily relevant for companies providing assurance services or requiring third-party assurance reports. For an energy company, this would typically only apply if they provide assurance services to other organizations or if required by specific stakeholders. Risk is low as it's not a core regulatory requirement for energy operations.

Financials

Three-year financials

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report