Social- og Boligministeriet (Ministry of Social Affairs and Housing)
Denmark · owned by Government of Denmark (Denmark) · sm.dk · 22 vendors
The Danish Ministry of Social Affairs and Housing is responsible for social policy areas including disadvantaged children and youth, socially excluded adults, disability policy, family law, civil society, social housing, and construction and housing legislation. The ministry oversees various institutions and boards that implement social and housing policies in Denmark.
Resilience scores
- Digital Sovereignty: 55
- Digital Resilience: 6
- Financial Resilience: 10
Technology vendors
- Adobe Inc. — Technology — United States
- Ritzaus Bureau A/S — Media & Marketing — Denmark
- Usercentrics GmbH — Technology — Germany
- and 19 more
Insights
Last updated 2026-09-18 · revision 40
22 direct vendors, 323 subvendors
Direct vendors by controlling owner country (sample)
- Germany: 1
- Sweden: 2
- Denmark: 9
Subvendors by controlling owner country (sample)
- Australia: 3
- France: 10
- Japan: 4
Migration Readiness: 7/10
Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.
The Ministry of Social Affairs and Housing exhibits medium-to-high migration readiness. A key strength is the existing adoption of Microsoft Azure (Danish Government Cloud), which signifies a strategic move towards cloud infrastructure and familiarity with cloud operations, significantly lowering the initial barrier to further cloud migration. The ministry's strong financial position, evidenced by consistent revenue growth, provides the necessary resources to fund complex migration projects. Furthermore, the use of modern core platforms like Umbraco CMS and Microsoft 365 suggests a foundation of applications that are often cloud-compatible. However, several factors present challenges to migration. The ministry operates within a strict and complex regulatory environment, including GDPR, NIS2, and the Danish Data Protection Act, coupled with stringent EU and national data residency requirements for highly sensitive social services data. These regulations necessitate meticulous planning, potentially limiting cloud provider and region choices, and demanding robust data protection and security measures throughout any migration. While Azure is in use, the mention of "Windows Server" could imply the presence of legacy or less cloud-native applications that may require substantial refactoring or re-platforming, increasing the complexity and cost of migration. Lastly, the "Vendor Lock-in Risk" is unknown. With 36 services, there could be multiple vendors and complex contracts that might complicate or delay migration efforts if not carefully managed, especially without explicit information on containerization or microservices indicating a fully cloud-native architecture.
Compliance
8 in-scope frameworks identified; showing 3.
ISO 27001 (source) — Assessment Required
ISO 27001 is an internationally recognised information security management standard. While not legally mandatory for Danish government ministries, it is strongly recommended by Digitaliseringsstyrelsen and CFCS as a best-practice framework for public sector IT security. The Danish government's IT security guidelines (vejledninger) align closely with ISO 27001 principles. Given the ministry's processing of highly sensitive social welfare data and its NIS2 obligations, ISO 27001 certification or equivalent controls are expected. Risk is Medium because: (1) absence of ISO 27001 certification does not constitute a legal violation but increases cybersecurity risk; (2) NIS2 compliance effectively requires ISO 27001-equivalent controls; (3) the ministry's subordinate agencies (e.g., Ankestyrelsen, Social- og Boligstyrelsen) may have separate certification statuses.
Evidence: https://www.sm.dk/ministeriet, https://digst.dk/, https://www.cfcs.dk/
Danish Whistleblower Protection Act — Compliant
The Danish Whistleblower Protection Act implements EU Directive 2019/1937 and requires public authorities with 50+ employees to establish internal whistleblower channels. Social- og Boligministeriet has publicly established a whistleblower scheme ('Whistleblowerordningen') and publishes annual statistics on its use. This demonstrates active compliance. Risk is Low because the ministry has demonstrably implemented the required mechanism and publishes transparency statistics.
Evidence: https://www.sm.dk/ministeriet/whistleblowerordningen-for-socialministeriets-departement, https://www.sm.dk/ministeriet/whistleblowerordningen-for-socialministeriets-departement/statistik-vedroerende-whistleblowerordningen-i-socialministeriets-departement
Danish Cookie Regulation — Partially Compliant
The Danish Cookie Regulation implements the EU ePrivacy Directive and requires informed consent for non-essential cookies. The ministry's website uses a cookie consent mechanism and publishes a detailed cookie policy. However, the cookie policy reveals that Siteimprove analytics data is stored on both Danish and German servers, which requires GDPR-compliant data processing agreements. The risk level is Medium because: (1) the ministry has implemented basic cookie consent; (2) Digitaliseringsstyrelsen actively supervises cookie compliance for Danish public websites; (3) the use of third-party analytics (Siteimprove) introduces data transfer and processor compliance obligations.
Evidence: https://www.sm.dk/cookies, https://www.retsinformation.dk/eli/lta/2011/1148, https://digst.dk/sikkerhed/digitale-tilsyn/tilsyn-med-cookieomraadet/cookievejledningen/
Financials
Three-year financials
- 2023:
- 2022:
- 2021:
Financial Resilience Score: 10/10
Social- og Boligministeriet is a Danish central-government ministry, not a commercial company, so traditional corporate financial metrics (revenue, EBIT, equity) do not apply. Its financial resilience is effectively maximal because it is funded through annual appropriations in the Danish Finance Act (Finansloven §15), passed by Folketinget. Denmark is a AAA-rated sovereign across S&P, Moody's, and Fitch, meaning counterparty risk is effectively nil. The ministry has a stable, permanent policy mandate with cross-party support for its core functions including child welfare, disability services, family law casework, and subsidies for socially exposed groups. Operational execution is diversified across subordinate agencies (Ankestyrelsen, Social- og Boligstyrelsen, Familieretshuset, Kofoeds Skole, DSI), spreading operational risk. Departmental operating appropriations are typically DKK 150-200M per year, while the total §15 finance-law area runs DKK 40-50B per year, dominated by transfer payments. Risks are primarily political/organizational rather than financial: the portfolio has been reorganized repeatedly (Social- og Ældreministeriet → Social- og Boligministeriet → Socialministeriet), and demographic pressures are increasing demand for disability and elder-adjacent services. Liquidity, solvency, and refinancing risks are irrelevant for a ministry.
Key strengths: Sovereign backing from AAA-rated Danish state, Annual appropriations guaranteed via Finansloven passed by Folketinget, Stable, permanent policy mandate with cross-party support, Diversified delivery through multiple subordinate agencies, Total §15 appropriation area of approximately DKK 40-50B annually
Risk factors: Political/reshuffle risk with repeated portfolio reorganizations, Satspulje/reserve fund reforms affecting discretionary social spending allocation, Demographic pressure increasing demand for disability and elder-adjacent services, Historical figures not fully comparable year-over-year due to structural changes
Revenue by geography
- Denmark: 100%
Revenue by product/service
- Transfer payments to municipalities and citizens: 90%
- Operating grants to subordinate agencies: 8%
- Departmental operations: 2%
Workforce by country
- Denmark: 230
Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.