Henrik Larsen Informationssikkerhed

Denmark · owned by Independent (Denmark) · larsen-infosik.dk · 9 vendors

Henrik Larsen Informationssikkerhed is an independent Danish cybersecurity consultancy operated by Henrik Larsen, a seasoned information security advisor, trainer, and public speaker with over 40 years of experience. The firm offers services spanning advisory, implementation, auditing, IT governance, risk management, and regulatory compliance, with a focus on ISO 27001 and related frameworks. Henrik is a former head of DKCERT (the Danish academic CERT) and a former member of Denmark's national Cybersikkerhedsråd (Cybersecurity Council).

Resilience scores

Disruption prediction

Henrik Larsen Informationssikkerhed has an estimated 17% probability of disruption in the next 6 months.

3 of Henrik Larsen Informationssikkerhed's 9 vendors monitored for disruptions.

Technology vendors

Insights

Last updated 2026-08-15 · revision 29

9 direct vendors, 103 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 7/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Henrik Larsen Informationssikkerhed demonstrates a medium-to-high level of migration readiness, primarily due to the implied simplicity of its operational model and lack of formal vendor lock-in. The stated "Total Vendors: 0" is a significant positive, suggesting minimal complex vendor relationships or contracts that would typically impede migration efforts. This indicates a high degree of flexibility in adopting new platforms or services. The company's core business involves advising on regulatory compliance, including NIS2 and GDPR, which means it possesses inherent expertise in navigating the legal and security requirements critical for any successful migration. This knowledge can help proactively address compliance challenges. However, a major limitation in assessing readiness is the unknown internal tech stack; without this information, assumptions must be made about its complexity. Given the nature of a single-person cybersecurity consultancy, it is plausible that the internal tech stack is lean, potentially relying on readily available SaaS tools or minimal infrastructure, which would further facilitate migration. Data residency requirements are not specified, which could be a potential challenge if client data has specific geographic constraints. Financial stability data is limited, and as a single-person operation, resources for a large-scale migration project might be constrained. Despite these unknowns, the apparent low vendor lock-in and strong regulatory knowledge position the company favorably for migration.

Financials

Financial Resilience Score: 4/10

Henrik Larsen Informationssikkerhed appears to be a personally-owned Danish micro-business, most likely a sole proprietorship (enkeltmandsvirksomhed) or a small ApS named after the founder, operating in the cybersecurity and information security advisory sector. No primary financial data (revenue, EBIT, equity) could be retrieved for this entity, and if it operates as a sole proprietorship, no årsrapport filing would be required with Erhvervsstyrelsen, meaning public financial figures may not exist at all. Even if structured as an ApS, small Danish ApS filings typically disclose only gross profit, profit/loss, and equity — not revenue. The business likely benefits from structurally strong demand for cybersecurity services in Denmark, driven by NIS2 transposition, DORA for financial firms, and ongoing GDPR enforcement. Micro-consultancies have very low fixed costs and high operational flexibility, and personal-brand firms tend to have sticky, repeat client relationships. However, resilience is materially constrained by near-total key-person risk (founder illness or unavailability halts revenue), likely high client concentration (solo consultants often derive >50% of revenue from 1–3 clients), inability to scale for large public-sector frameworks, and a limited equity buffer typical of small ApS's where a 3–6 month revenue gap could be material. Given the absence of verified financial data and the inherent fragility of a one-person consultancy, a moderate-to-below-average resilience score is appropriate. The sector tailwinds partially offset the structural vulnerabilities of the micro-business model.

Key strengths: Strong structural demand for cybersecurity advisory in Denmark (NIS2, DORA, GDPR), Very low fixed costs typical of micro-consultancies, High operational flexibility, Sticky, repeat client relationships from personal-brand model

Risk factors: Near-total key-person risk in a founder-named one-person firm, Likely high client concentration (>50% from 1-3 clients typical), No scale to bid for large public-sector frameworks, Limited equity buffer typical of small ApS entities, No public financial disclosure available for verification

Revenue by geography

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report