Energistyrelsen (Danish Energy Agency)

Denmark · owned by Danish Ministry of Climate, Energy and Utilities (Klima-, Energi- og Forsyningsministeriet) (Denmark) · ens.dk · 26 vendors

Energistyrelsen (the Danish Energy Agency) is a Danish government agency under the Ministry of Climate, Energy and Utilities responsible for ensuring a secure, green, and affordable energy supply in Denmark. It oversees energy policy implementation, renewable energy development (including offshore wind and solar), CO2 capture and storage, energy statistics and analysis, and administers subsidies and grants for energy efficiency and clean energy transitions. The agency operates offices in both Copenhagen and Esbjerg.

Resilience scores

Technology vendors

Insights

Last updated 2026-08-18 · revision 9

26 direct vendors, 332 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 4/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Energistyrelsen exhibits a low-medium level of migration readiness. The primary strength is its highly stable financial position as a government agency, providing the necessary resources to fund a complex migration. However, several significant challenges impede readiness. A critical impediment is the complete lack of information regarding its internal tech stack (e.g., cloud-native adoption, containerization, microservices), making it impossible to accurately assess the technical effort, complexity, and potential refactoring required for migration. Strict data residency requirements, mandating data hosting within Denmark or the EU, severely limit the choice of cloud providers and regions, potentially increasing costs and architectural constraints. The high regulatory burden, including NIS2 applicability, Danish and EU energy law, environmental regulations, and GDPR, imposes stringent compliance requirements that must be meticulously addressed throughout any migration, adding significant overhead and complexity. While 'Vendor Lock-in Risk: Unknown' is stated, the presence of 'Total Services: 40' suggests a potentially broad and complex landscape of dependencies, which could lead to significant challenges in disentangling services and migrating them. The geographic diversity of vendors, while good for resilience, does not directly translate to ease of migration if deep integrations or proprietary technologies are involved.

Compliance

8 in-scope frameworks identified; showing 3.

Rigsrevisionen Audit — Compliant

Energistyrelsen is subject to annual audit by Rigsrevisionen (the National Audit Office of Denmark) under Rigsrevisorloven. This covers financial management, performance, and compliance with applicable laws and regulations. Annual reports are publicly available. Risk is Low as this is a standard public sector accountability mechanism with no identified adverse findings.

Evidence: https://www.rigsrevisionen.dk/english, https://ens.dk/om-energistyrelsen/publikationer, https://www.retsinformation.dk/eli/lta/2016/101

NIS2 (source) — Assessment Required

NIS2 (EU Directive 2022/2555) is highly likely applicable to Energistyrelsen on two distinct grounds: (1) As the Danish Energy Agency, it falls within the 'Energy' sector explicitly listed as an Essential Entity sector under Annex I of NIS2, covering electricity, oil, gas, and district heating subsectors. (2) As a central public administration body, Energistyrelsen also falls under the 'Public Administration' Essential Entity category under Annex I. Denmark transposed NIS2 into national law via the Lov om sikkerhed i net- og informationssystemer (NIS2-loven), effective October 2024. The Danish Centre for Cyber Security (CFCS) and sector-specific authorities oversee compliance. Risk is High because: energy sector critical infrastructure is a primary NIS2 target; Energistyrelsen both regulates and operates critical digital systems; non-compliance can result in significant administrative fines and mandatory remediation orders; and the energy sector faces elevated cyber threat levels per CFCS threat assessments.

Evidence: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32022L2555, https://www.cfcs.dk/en/, https://ens.dk/ansvarsomraader/cybersikkerhed, https://www.ft.dk/samling/20231/lovforslag/l111/index.htm, https://ens.dk

ISO 27001 (source) — Assessment Required

ISO 27001 is the internationally recognised standard for Information Security Management Systems (ISMS). While not legally mandatory for Danish public authorities, it is strongly recommended and increasingly expected — particularly for entities subject to NIS2 (which references ISO 27001-aligned controls). The Danish government's digitisation strategy and the Agency for Digital Government (Digitaliseringsstyrelsen) promote ISO 27001 adoption across public sector entities. Given Energistyrelsen's role in critical energy infrastructure regulation and its NIS2 obligations, ISO 27001 certification would be a natural compliance tool. Risk is Medium because: absence of certification does not constitute a legal violation, but it increases cybersecurity risk exposure and may complicate NIS2 compliance demonstration; the energy sector faces elevated cyber threats per CFCS.

Evidence: https://ens.dk, https://www.iso.org/isoiec-27001-information-security.html, https://www.digst.dk/styring/standarder-og-arkitektur/, https://www.danak.dk/akkreditering/certificering/

Financials

Three-year financials

Financial Resilience Score: 9/10

Energistyrelsen is a Danish government agency under the Ministry of Climate, Energy and Utilities, not a commercial company. Its funding is provided through annual state appropriations on Finansloven (§29.21), backed by the Danish sovereign, which is AAA-rated. This effectively eliminates funding and solvency risk in the corporate sense. The agency's own net operating appropriation has historically been in the range of DKK 300-500M per year, with material growth since 2019-2020 as its remit expanded. The agency benefits from a strong and durable political mandate anchored in Denmark's Klimalov (2020), which commits to a 70% GHG reduction by 2030 and climate neutrality by 2045/2050. Energistyrelsen is a central implementing body for these targets, ensuring stable and growing budget support. It also administers off-balance-sheet subsidy flows (offshore wind CfDs, biogas, building renovation, energy relief) running into several billions of DKK annually, and receives supplementary externally financed inflows via the Danish Energy Partnership Programme with donors such as the World Bank and IEA. Key weaknesses are non-financial: execution risk on major programmes (energy islands delays, under-subscribed tenders), rapid headcount scaling (roughly doubling in 5-7 years) creating onboarding and salary pressure, regulatory/appeals exposure including potential EU state-aid issues, and the structural inability to generate independent revenue outside of the Finanslov allocation.

Key strengths: Sovereign backing by AAA-rated Danish state, Durable political mandate under Klimalov (2020) targeting 70% GHG cut by 2030, Expanding remit driving budget and headcount growth (energy islands, CCS, PtX, offshore wind), Externally financed inflows via Danish Energy Partnership Programme (World Bank, IEA, partner countries), Administers multi-billion DKK subsidy schemes on behalf of the state

Risk factors: Execution and delivery risk on major programmes (energy islands delays, tender under-subscription), Rapid personnel scaling creating onboarding, retention and salary-cost pressure, Regulatory complexity, appeals, and potential EU state-aid litigation, No independent revenue - fully dependent on annual Finanslov allocations, Political/reputational risk from high-profile tender and permit programmes

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report