Furesø Vandforsyning
Denmark · owned by Independent (Denmark) · furesoevand.dk · 39 vendors
Furesø Vandforsyning is a consumer-owned water supply company that provides water to approximately 40,000 consumers at about 11,400 consumption points in Furesø Municipality. The company operates as a non-profit organization based on a self-sustaining principle, serving areas including Farum, Bregnerød, Stavnsholt, Sydlejren, Laanshøj, Hareskovby, Jonstrup, Kirke Værløse and Værløse.
Resilience scores
- Digital Sovereignty: 62
- Digital Resilience: 4
- Financial Resilience: 8
Technology vendors
- Cookiebot (Cybot A/S) — Technology — Denmark
- Danova A/S — Denmark
- Picca Automation A/S — Manufacturing — Denmark
- and 36 more
Insights
Last updated 2026-07-04 · revision 70
39 direct vendors, 301 subvendors
Direct vendors by controlling owner country (sample)
- France: 1
- Japan: 1
- Poland: 1
Subvendors by controlling owner country (sample)
- Spain: 2
- Russia: 1
- Indonesia: 1
Migration Readiness: 3/10
Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.
Furesø Vandforsyning's migration readiness is assessed as medium-low, primarily hampered by a lack of modern digital infrastructure, critical regulatory non-compliance, and significant unknowns regarding its vendor landscape. The provided data indicates an internal focus on operational technologies ('Water Distribution Network Infrastructure', 'Groundwater Extraction & Borehole Systems'), with no mention of cloud-native applications, containerization, or microservices. This suggests a traditional, potentially monolithic, or highly specialized OT environment that would be challenging and costly to migrate to modern cloud platforms without extensive re-engineering. A major impediment to migration readiness is the company's high-risk status regarding NIS2 Directive compliance. As an Essential Entity, the failure to demonstrate compliance by the October 2024 deadline indicates a fundamental gap in cybersecurity and risk management, which are prerequisites for any secure and successful digital migration. While GDPR compliant, the EU data residency requirements add complexity, necessitating careful selection of cloud providers and data processing locations to maintain compliance during and after migration. The financial stability, with consistent revenue growth, suggests the company has the potential to fund a migration. The 'Total Vendors: 0' data point is ambiguous given the subsequent listing of vendor geographic diversity. If interpreted strictly, it would imply no vendor lock-in, which is a positive for migration. However, assuming the listed geographic diversity refers to their vendor relationships, the 'Vendor Lock-in Risk' is unknown. If the company is heavily reliant on proprietary operational technology vendors, this could lead to significant lock-in, increasing the cost and complexity of any migration effort. Without a clear understanding of the current digital tech stack beyond operational systems and a resolution to the NIS2 compliance issue, a smooth and efficient migration to a more modern, agile infrastructure appears challenging.
Compliance
9 in-scope frameworks identified; showing 3.
Danish Emergency Preparedness — Assessment Required
Water supply is classified as critical infrastructure in Denmark. The Danish Emergency Management Act (Beredskabsloven) and associated sector-specific emergency preparedness requirements impose obligations on water utilities to maintain emergency plans, ensure continuity of supply, and coordinate with civil protection authorities. Risk is High given the public safety implications of water supply disruption and the heightened focus on critical infrastructure protection in Denmark following geopolitical developments in the Baltic region.
Evidence: https://furesoevand.dk, https://www.brs.dk/da/beredskab/, https://www.retsinformation.dk/eli/lta/2017/314
NIS2 (source) — Assessment Required
Furesø Vandforsyning is a drinking water supplier — a sector explicitly listed as an Essential Entity under Annex I of the NIS2 Directive (Directive (EU) 2022/2555). Drinking water supply and distribution is one of the eleven essential sectors. Denmark transposed NIS2 into national law via the 'Lov om sikkerhed i net- og informationssystemer' (NIS2-loven), which entered into force in late 2024. The risk is High because: (1) the sector match is unambiguous and confirmed; (2) as an Essential Entity, Furesø Vandforsyning faces the most stringent obligations including mandatory incident reporting to the Danish Centre for Cyber Security (CFCS/NCSC-DK), risk management measures, supply chain security, and management accountability; (3) penalties for Essential Entities can reach €10 million or 2% of global annual turnover; (4) small utilities are frequently identified as having immature cybersecurity postures; (5) Danish authorities (CFCS and the Danish Energy Agency) are actively implementing NIS2 oversight for the water sector. The size threshold (50+ employees or €10M+ turnover) requires verification — the company appears to be a small-to-medium utility, but water utilities are subject to sector-specific rules that may override standard size thresholds under Danish NIS2 implementation.
Evidence: https://furesoevand.dk, https://www.cfcs.dk/en/, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32022L2555, https://www.ens.dk/ansvarsomraader/cybersikkerhed, https://www.retsinformation.dk/eli/lta/2024/1655
Danish Drinking Water Regulation — Assessment Required
This is the primary sector-specific regulation governing Furesø Vandforsyning's core operations. The Danish Drinking Water Order (implementing EU Drinking Water Directive 98/83/EC and its 2020 recast 2020/2184/EU) sets mandatory water quality standards, monitoring requirements, and reporting obligations. Risk is High because: (1) non-compliance directly affects public health; (2) the company's own website references DMS contamination investigations, indicating active quality monitoring obligations; (3) the Danish Environmental Protection Agency (Miljøstyrelsen) and Furesø Kommune are active supervisory authorities; (4) violations can result in supply restrictions, mandatory remediation, and criminal liability for management.
Evidence: https://furesoevand.dk, https://www.retsinformation.dk/eli/lta/2018/1147, https://www.mst.dk/natur-vand/vand-i-hverdagen/drikkevand/, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32020L2184
Financials
Financial Resilience Score: 8/10
Furesø Vandforsyning operates as a Danish consumer-owned, non-profit water utility (A.m.b.a.) under the 'hvile-i-sig-selv' (cost-recovery) principle, which structurally ensures long-term financial stability. As the sole drinking-water supplier in its service area (Furesø Municipality), the company enjoys regulated monopoly cash flows that are highly predictable and inelastic to economic cycles. Tariffs are set to cover costs, meaning long-term insolvency risk is very low, and the municipality effectively backstops the framework through tariff approvals. The consumer-ownership model eliminates dividend pressure, allowing surpluses to be reinvested or returned via lower future tariffs. Operational scale has been improved through a partnership with Stenløse Vandværk since 2018/2019, reducing per-m³ cost pressure. Long asset lives (40-75 years for water networks) provide stable capex planning. However, risks include water-quality regulation (DMS traces detected in one borehole, though below limits), capex intensity from ongoing pipe renovation, small operational scale, and evolving regulatory requirements under Vandsektorloven.
Key strengths: Regulated monopoly cash flows as sole drinking-water supplier in service area, Non-profit cost-recovery model (hvile-i-sig-selv) minimizes insolvency risk, Consumer ownership eliminates dividend pressure, Operational partnership with Stenløse Vandværk since 2018/2019 improves scale, Long asset lives (40-75 years) enable stable capex planning, Municipality backstops framework via tariff approvals
Risk factors: Water-quality regulation risks including DMS (pesticide breakdown product) traces in one borehole, PFAS/pesticide residue is an industry-wide risk, Capex intensity from ongoing pipe renovation programs (Søndergårdsvej quarter and other areas), Water loss / non-revenue water requiring active leak detection management, Small operational scale limits ability to absorb one-off environmental/technical shocks, Regulatory changes under Vandsektorloven (economic benchmarking, efficiency requirements)
Revenue by geography
- Denmark (Furesø Municipality): 100%
Revenue by product/service
- Drinking water supply (extraction, treatment, distribution): 100%
Workforce by country
- Denmark: 0
Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.