Knowledge base
Knowledge base
Explanations of the Dutch Cyberbeveiligingswet and ISO 27001, based on the text of the law and the publications of the NCSC and the supervisors. Each article states when it was last updated.
Does the Cyberbeveiligingswet apply to your organisation?
Whether the Dutch Cyberbeveiligingswet applies depends on your sector, your size and a set of exceptions. How to test it, and what to do if in doubt.
Read the article →The notification duty under the Cyberbeveiligingswet: 24 hours, 72 hours, one month
What the Cyberbeveiligingswet notification duty requires: when an incident is significant, what you report after 24 hours, 72 hours and a month, and where.
Read the article →