The level of security of government agencies is inadequate in several places Status of ISO 27001 implementation 43% Implemented Status of the technical minimum requirements 35% 57% 65% Implemented Not implemented Not implemented Government agencies are required to comply with the ISO 27001 security standard and implement 20 technical minimum requirements. Only 57% have fully implemented the ISO 27001, and only 35% comply with all 20 requirements. Source: Danish Agency for Digital Government Too many ICT systems critical to society in the central government are in an inadequate state 54% 0% 10% 20% 30% 46% 40% Adequate state 50% 60% 70% 80% 90% 100% Inadequate state 46% of the ICT systems critical to society in the central government are in an inadequate state. For a large proportion of ICT systems, the cause is the inadequacy of the technical conditions and/or an inadequate level of security. Source: Danish Agency for Digital Government Companies have not implemented basic security measures Security measures deficiencies Inadequate level of security 24 % 40 % of SMEs have not implemented the two basic security measures of back-up and automatic updating of software. of SMEs have an inadequate level of digital security in relation to their risk profile. Source: Digital security in Danish SMEs 2021 Source: Digital security in Danish SMEs 2021