ITSikkerhedsGruppen ApS Due Diligence

Run due diligence on ITSikkerhedsGruppen ApS: check compliance and get alerts when suppliers or ownership change.

Denmark · owned by TVESKÆG HOLDING ApS (Denmark) · itsg.dk · 5 vendors

ITSikkerhedsGruppen ApS is a Danish cybersecurity and information security consultancy offering expert advisory services within cybersecurity, GDPR, NIS2, risk management, and governance. The company provides services including compliance care, trusted advisor roles, audits, training (academy), mentoring, and interim leadership (e.g., CISO). It serves clients ranging from startups to global enterprises, both in Denmark and internationally.

Resilience scores

Disruption prediction

The category benchmark for ITSikkerhedsGruppen ApS is a 5% probability of disruption in the next three months.

Technology vendors

Insights

Last updated 2026-10-15 · revision 8

5 direct vendors, 33 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 4/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

ITSikkerhedsGruppen ApS demonstrates low-to-medium migration readiness. The primary challenges stem from the company's limited resources and the complex regulatory environment. With only one employee, the capacity to plan, execute, and manage a significant migration project is severely constrained. Financial stability is also a concern, as evidenced by the lack of revenue data and a decreasing gross profit, which would limit the ability to fund migration efforts. The regulatory landscape, particularly GDPR and the Danish Databeskyttelsesloven, imposes strict data residency and transfer requirements. Any migration involving personal data outside the EU/EEA would necessitate robust compliance measures (e.g., adequacy decisions, SCCs), adding significant complexity and cost. While the company utilizes Microsoft cloud services, suggesting some familiarity with cloud environments, there is no information on whether their existing architecture is cloud-native, containerized, or microservices-based, which would typically facilitate easier migration. The 'Medium' vendor lock-in risk also indicates that transitioning away from existing vendors might present challenges. Opportunities for migration readiness are primarily due to the company's small scale, which might mean a smaller volume of data and systems to migrate compared to larger enterprises. However, the substantial financial, human, and regulatory hurdles mean that any migration would be a challenging undertaking requiring careful planning and external support.

Compliance

7 in-scope frameworks identified; showing 3.

DORA (source) — No public evidence

The Digital Operational Resilience Act applies to financial entities and their critical ICT third-party service providers. ITSikkerhedsGruppen ApS would be in scope if it is a critical provider to the financial sector in the EU.

Danish Data Protection Act — Evidence found

This Act supplements the GDPR in Denmark, where ITSikkerhedsGruppen ApS is established.

Evidence: https://itsg.dk/politikker, https://www.dlapiperdataprotection.com/?t=law&c=DK, https://cdn.datatilsynet.dk/datatilsynet/media/7753/danish-data-protection-act.pdf, https://www.twobirds.com/en/insights/2018/denmark/the-danish-data-protection-act-has-been-passed, https://iclg.com/practice-areas/cybersecurity-laws-and-regulations/denmark/

GDPR (source) — Evidence found

ITSikkerhedsGruppen ApS is established in Denmark, an EU member state, and processes personal data of its clients and website visitors.

Evidence: https://www.dlapiperdataprotection.com/?t=law&c=DK, https://cdn.datatilsynet.dk/datatilsynet/media/7753/danish-data-protection-act.pdf

Financials

Three-year financials

Financial Resilience Score: 6/10

ITSikkerhedsGruppen ApS presents a mixed resilience picture. On the positive side, the balance sheet is exceptionally strong for a company of its size: solvency ratio of 70.4%, liquidity ratio of 337.9%, essentially no debt, and no fixed assets to weigh down operations. Both reported fiscal periods have been profitable (net profit of DKK 950K in the long first period and DKK 376K in 2025), and the company benefits from a favorable regulatory tailwind from NIS2, DORA, GDPR, AI Act, and CRA — all of which drive demand for exactly the compliance and advisory services the firm offers. However, resilience is materially capped by scale and concentration. The company is effectively a one-person consultancy (1 FTE) built around founder Christian Grønlund Brage, creating extreme key-person risk. Earnings fell sharply from year 1 to year 2 even on an annualized basis (EBIT per month dropped from ~DKK 72K to ~DKK 42K), and equity declined from DKK 990K to DKK 866K indicating dividends exceeded retained earnings. With gross profit of only ~DKK 1.25M, there is no cushion to absorb the loss of a major client. Group backing via parent TVESKÆG HOLDING ApS exists but its depth is unknown. Overall the company is financially healthy at a micro scale but structurally fragile.

Key strengths: Solvency ratio of 70.4% (rated 'very good'), Liquidity ratio of 337.9% (rated 'very good'), Profitable since inception with no accumulated losses, No fixed assets / no capex overhang - pure services model, Favorable regulatory tailwind (NIS2, DORA, GDPR, AI Act, CRA), Group backing from parent TVESKÆG HOLDING ApS, Return on assets of 30.6% in 2025

Risk factors: Extreme key-person risk - 1 FTE, dependent on founder, EBIT declined 60.2% year-over-year, Equity declined 12.5%, suggesting dividends exceeded earnings, Revenue (nettoomsætning) not disclosed in filings, Minimal scale - gross profit only ~DKK 1.25M, Likely high client concentration (handful of material clients), No capacity to absorb loss of a major client, Operating costs rose in 2025 compressing margins

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report