NIS2 is the European directive that aims to strengthen the digital resilience of organisations in essential and important sectors. In the Netherlands it is implemented through the Cyberbeveiligingswet, which has applied since 15 August 2026. Read news and analysis on topics such as the duty of care, incident reporting, board training and supervision.
The Dutch Authority for Digital Infrastructure (RDI) has published NIS2 quickscan results for all 9 sectors it will supervise. NIS2 board training tops the list of areas for attention. What are the outcomes for your sector?
The Dutch implementation law for NIS2 (Cyberbeveiligingswet) is not ready yet, and the first changes to NIS2 have already been proposed. What are the changes in the European Commission's proposal?
NIS2 Quality Mark is now called the NIS2 Supply Chain certificate. The name change puts more emphasis on the importance of resilience and digital security in the supply chain. Companies that need to comply with NIS2 are also responsible for ensuring the security of their direct suppliers.
Update: the Cyberbeveiligingswet has now been in force since 15 August 2026. In June 2025, the Dutch implementation of NIS2 was further delayed, with Q2 2026 as the expected date.
Digital Security Instituut has been selected as an audit partner for the NIS2 Quality Mark. This allows us to certify suppliers of NIS2 organizations. We are proud that we can contribute to strengthening the digital resilience of the supply chain.
The NIS2 duty of care is elaborated in the Cyberbeveiligingsbesluit, which has applied since 15 August 2026. Which measures stand out, and what can NIS2 companies expect?
The Cyberbeveiligingswet, the Dutch implementation of NIS2, has applied since 15 August 2026. That is almost two years after the EU deadline of 17 October 2024, and later than the Q3 2025 expected earlier.
CEOs are still not involved enough in NIS2. Directors need to get to work to gain the right knowledge and skills about NIS2 and cyber security.