The cyber threat is high. Here is how we protect you
The threat from cyber attacks against Danish companies has never been higher. As an IT partner with access to our customers’ systems and data, we take that personally. Security is built into every system we deliver and every way we work.
What the authorities say right now
The Danish Agency for Societal Security (SAMSIK) rates the threat from both cybercrime and cyber espionage against Denmark as VERY HIGH. In September 2026 the agency also raised the threat from destructive cyber attacks from medium to HIGH, pointing to Russia’s growing willingness to take risks.
It is not theory. In late 2024 pro-Russian hackers compromised the control system of a small Danish water utility and manipulated the water pressure, leaving 450 households without water for a period.
Across Europe, ENISA analysed 4,875 incidents between July 2024 and June 2025. Phishing was the way in for around 60% of them, ransomware was the most damaging threat, and AI now helps attackers write convincing phishing mails in any language.
Why IT suppliers are a target
SAMSIK puts it plainly: suppliers are generally attractive targets for hackers. A supplier often has access to many customers at once, so one weak link can open many doors. That is exactly why we treat our own security as part of the product we deliver.
What we do at CC-Interactive
- Two-factor login and tight access. MFA on every system, people only get the rights they need, and access is removed when someone leaves.
- Encryption everywhere. Data is encrypted in transit and at rest.
- EU hosting on T-Systems. Each customer gets a private instance in Germany, under EU law and with no US cloud providers.
- Secure development. Code review and automatic scanning of our code and its dependencies for known vulnerabilities.
- Separate environments. Development, test and production are kept apart, so test data and bugs never reach production.
- Backups we have tested. We back up, and we test that we can actually restore.
- Monitoring and logging. Unusual activity is spotted and handled fast.
- Trained people. Regular security and phishing training, because most attacks start with an email.
NIS2 makes security a management task
The Danish NIS2 law entered into force on 1 July 2025. It requires the companies it covers to manage cyber risk and anchors responsibility with top management, including in the supply chain. When you choose an IT partner, their security becomes part of yours.
Five things you can do this week
- Turn on two-factor login for email and every system that supports it.
- Check who has access to what, and remove what is no longer needed.
- Test a restore from backup, not just the backup itself.
- Ask your IT suppliers how they protect your data and where it is hosted.
- Train your colleagues to spot phishing, including AI-written mails.
Want to know how secure your current systems are, or need a system built with security from day one? Talk to us.
Sources: SAMSIK, Cybertruslen mod Danmark 2025. SAMSIK, threat from destructive cyber attacks raised to high, September 2026. ENISA Threat Landscape 2025. Dansk Erhverv on NIS2.