NCC-DK (Nationalt Koordinationscenter for Cybersikkerhed i Danmark) Due Diligence

Run due diligence on NCC-DK (Nationalt Koordinationscenter for Cybersikkerhed i Danmark): check compliance and get alerts when suppliers or ownership change.

Denmark · owned by Independent (Denmark) · ncc-dk.dk · 8 vendors

NCC-DK is Denmark's National Coordination Centre for Cybersecurity, bringing together companies, public authorities, and research environments within the Danish cybersecurity ecosystem. It provides services including a professional network, grant funding pools, and EU funding advisory to strengthen collaboration and innovation in cybersecurity. The organisation is co-funded by the EU and supported by partners including the Danish Business Authority (Erhvervsstyrelsen) and the European Cybersecurity Competence Centre (ECCC).

Resilience scores

Technology vendors

Insights

Last updated 2026-09-14 · revision 7

8 direct vendors, 100 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Compliance

6 in-scope frameworks identified; showing 3.

ECCC Regulation — Evidence found

NCC-DK was established under Regulation (EU) 2021/887, which created the European Cybersecurity Competence Centre (ECCC) and the Network of National Coordination Centres.

Evidence: https://cybersecurity-centre.europa.eu/nccs-0_en, https://jam42.substack.com/p/goals-and-role-of-european-cybersecurity, https://www.bsi.bund.de/EN/Themen/Unternehmen-und-Organisationen/Informationen-und-Empfehlungen/NKCS/nkcs_node.html, https://cybersecurity-centre.europa.eu/nccs_en, https://www.developmentaid.org/organizations/view/581250/ncc-dk-danish-cybersecurity-coordination-centre, https://digitallead.dk/indsigt/projekter/nationale-koordinationscenter-for-cybersikkerhed-ncc-dk/

Forvaltningsloven — No public evidence

The Danish Public Administration Act (Forvaltningsloven) applies to all parts of the public administration. NCC-DK is a public sector entity performing public administration functions.

Evidence: https://cybersecurity-centre.europa.eu/nccs_en, https://www.nis-2-directive.com/Transposition/Denmark.html, https://www.rti-rating.org/wp-content/uploads/Denmark.pdf, https://plesner.com/en/news/access-to-documents-in-public-files-is-a-key-consideration-when-sharing-information-with-public-authorities

NIS2 (source) — No public evidence

The NIS2 Directive applies to public administration entities. NCC-DK is a public sector body. Denmark has transposed NIS2 into national law, and it applies to both public and private entities in critical sectors.

Evidence: https://www.nccgroup.com/media/ipvjhh1i/ncc-group-nis2-e-guide-2024.pdf, https://cybersecurity-centre.europa.eu/nccs_en, https://www.nis-2-directive.com/Transposition/Denmark.html, https://www.nccgroup.com/campaign/nis2-prepare-your-organisation-for-compliance/, https://digital-strategy.ec.europa.eu/en/policies/nis2-directive-denmark

Financials

Financial Resilience Score: 7/10

NCC-DK is not a commercial entity but a public-sector coordination center jointly anchored in two Danish government agencies (Styrelsen for Samfundssikkerhed and Erhvervsstyrelsen) and operated by the CenSec and DigitalLead cluster consortium. Its financial resilience therefore rests entirely on public budget appropriations rather than commercial revenue. Funding stability is supported by dual sources: Danish national budget allocations and EU co-financing via Horizon Europe and the Digital Europe programme. Its existence is embedded in EU regulation as part of a 27-country ECCC network, giving multi-year structural visibility. However, the mandate is time-limited: the current operator agreement with CenSec and DigitalLead runs only until end-2025, and continuation depends on renewed tender awards and political appropriations. The total programme budget for 2024-2025 is modest at DKK 17.3-17.8 million across three grant pools. Because NCC-DK has no independent legal entity, balance sheet, or equity buffer, it cannot absorb shocks independently and is fully dependent on its sponsoring agencies and operator clusters. No successor programme budget for the post-2025 period has been publicly disclosed as of the analysis date.

Key strengths: Institutional backing from two Danish government agencies (Styrelsen for Samfundssikkerhed and Erhvervsstyrelsen), EU co-financing via Horizon Europe and Digital Europe programme, Structural mandate embedded in EU cybersecurity regulation as part of 27-country ECCC network, Established operator consortium (CenSec + DigitalLead) with existing cluster infrastructure, Active grant programme of DKK 17.3-17.8M for 2024-2025

Risk factors: Time-limited operator mandate expiring end-2025 with no publicly disclosed renewal, Full dependence on Danish state budget appropriations and EU funding envelope, No independent legal entity, balance sheet or equity buffer, Operator continuity risk if CenSec or DigitalLead cluster funding weakens, No separate CVR registration or published annual accounts, limiting financial transparency

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report