Danmarks Nationalbank

Denmark · owned by Independent (Denmark) · nationalbanken.dk · 12 vendors

Danmarks Nationalbank is the central bank of Denmark, responsible for ensuring stable prices through the country's fixed exchange rate policy. It oversees secure and efficient payment systems and works to maintain stability in the Danish financial sector. It also publishes economic analyses, statistics, and exchange rates, and issues Danish banknotes and coins.

Resilience scores

Technology vendors

Insights

Last updated 2026-09-08 · revision 3

12 direct vendors, 209 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 4/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Danmarks Nationalbank exhibits medium migration readiness, facing significant challenges primarily due to its specialized and potentially legacy tech stack. Core systems such as 'Statbank (Danmarks Nationalbank's proprietary statistical database platform),' 'TARGET2,' and 'SWIFT' are highly integrated and often on-premise, making a straightforward migration to cloud-native architectures complex, costly, and time-consuming. The stringent regulatory environment, including EU financial regulations, GDPR, and NIS2 applicability, imposes strict requirements on data residency, security, and operational processes, which would severely limit cloud provider choices and deployment strategies. Data residency requirements, likely within Denmark or other EU member states, further constrain migration options. The 'Unknown' vendor lock-in risk is a notable concern, as deep integration with existing vendors for critical infrastructure could create substantial hurdles in transitioning to new platforms. While the bank's financial stability, backed by the Danish state, suggests that funding for a strategic migration would likely be available, the technical and regulatory complexities present significant barriers to achieving high migration readiness.

Compliance

10 in-scope frameworks identified; showing 3.

NIS2 (source) — Compliant

Danmarks Nationalbank is Denmark's central bank and falls squarely within the 'Banking' sector explicitly listed as an Essential Entity under NIS2 Annex I. As the operator of critical financial market infrastructure — including payment systems, monetary policy operations, and foreign exchange reserves management — it is among the most systemically important institutions in Denmark. NIS2 imposes stringent cybersecurity risk management, incident reporting (within 24 hours for early warning, 72 hours for notification), supply chain security, and board-level accountability requirements. Risk is High because: (1) a cybersecurity incident at a central bank would have systemic national and EU-wide consequences; (2) NIS2 enforcement in Denmark (via the Centre for Cyber Security / CFCS and the Danish Financial Supervisory Authority / Finanstilsynet) is active and rigorous; (3) penalties for Essential Entities can reach €10 million or 2% of global annual turnover; (4) the complexity of central bank IT infrastructure (SWIFT, TARGET2/T2, payment systems) creates a broad attack surface.

Evidence: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32022L2555, https://www.cfcs.dk/en/, https://www.finanstilsynet.dk/en, https://www.nationalbanken.dk/en, https://www.ecb.europa.eu/paym/cyber-resilience/tiber-eu/html/index.en.html

ISAE 3000 (source) — Assessment Required

ISAE 3000 and its financial-services variant ISAE 3402 are relevant for organizations that provide services to other entities and need to demonstrate controls assurance. As a central bank providing payment infrastructure, settlement services, and monetary policy operations to Danish financial institutions, Danmarks Nationalbank may be subject to or may commission ISAE 3000/3402 assurance engagements. Risk is Medium because lack of formal assurance reporting could undermine confidence of counterparties and regulators in the bank's operational controls.

Evidence: https://www.nationalbanken.dk/en, https://www.rigsrevisionen.dk/english, https://www.iaasb.org/publications/international-standard-assurance-engagements-isae-3000-revised-assurance-engagements-other-audits-or

ISO 27001 (source) — Assessment Required

ISO 27001 is the international standard for Information Security Management Systems (ISMS). While not legally mandated for central banks, it is widely adopted in the financial sector and strongly encouraged by regulators including the ECB and EBA. Given Danmarks Nationalbank's role as a critical financial infrastructure operator, robust information security management is essential. Risk is Medium because: (1) failure to maintain ISO 27001-equivalent controls could expose the bank to cybersecurity incidents with systemic consequences; (2) NIS2 and DORA both require risk management measures that align closely with ISO 27001 controls; (3) no public certification evidence was found, creating uncertainty about formal certification status.

Evidence: https://www.nationalbanken.dk/en, https://www.iso.org/isoiec-27001-information-security.html, https://www.ecb.europa.eu/paym/cyber-resilience/tiber-eu/html/index.en.html

Financials

Three-year financials

Financial Resilience Score: 10/10

Danmarks Nationalbank is the central bank of the Kingdom of Denmark, an independent self-governing institution backed by the AAA-rated Danish sovereign. As a central bank issuing its own currency, it cannot become insolvent in domestic terms, giving it the highest possible financial resilience. Its balance sheet is supported by one of the largest per-capita FX reserves in Europe (approximately DKK 500-600 bn), primarily EUR-denominated to defend the ERM II peg. The institution has a Value Adjustment Reserve that acts as a shock absorber for valuation losses before they hit core capital. Recurring income streams include seigniorage on banknotes and net interest income on the FX reserve and monetary-policy portfolio. Even the record ~DKK 21.7 bn loss in 2022 (driven by rising bond yields) was absorbed without threatening the institution's operational capacity, and 2023 saw a return to profitability of approximately DKK 5.3 bn as positive net interest carry re-emerged. Institutional independence is enshrined in the Danmarks Nationalbank Act, and the bank benefits from a distribution mechanism with the Danish State that stabilizes long-term capital. Key risks are largely market-driven (interest rate, FX, and gold valuation risk) rather than solvency-driven.

Key strengths: Sovereign backing by AAA-rated Kingdom of Denmark, Cannot become insolvent in domestic currency as issuer of DKK, Substantial FX reserves (~DKK 500-600 bn), predominantly EUR-denominated, Value Adjustment Reserve acts as shock absorber against valuation losses, Recurring seigniorage and net interest income streams, Institutional independence enshrined in Danmarks Nationalbank Act, Return to profitability in 2023 (~DKK 5.3 bn) after 2022 loss

Risk factors: Interest-rate risk on large fixed-income portfolio (caused ~DKK 21.7 bn loss in 2022), FX and gold valuation risk on ~66 tonnes gold and EUR/USD exposures, Peg-defense risk requiring potentially heavy market intervention (as in 2015), Political/reputational risk around operational transitions such as 2026 banknote demonetisation

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report