The National Cyber Security Center (NCSC) and the Digital Trust Center (DTC) have jointly launched a set of basic principles to strengthen the digital resilience of Dutch organizations. The new guidelines, which consist of five concrete principles, are aimed at improving the digital security of companies and institutions, regardless of their size or sector. This step marks the first time that the government has issued a single set of guidelines that can be applied to both critical and non-critical organizations.
The five basic principles are:
1. Identify risks
2. Promote safe behavior
3. Protect systems, devices, and applications
4. Manage access to data and services
5. Prepare for incidents.
With these guidelines, the NCSC and DTC aim to help organizations get their basic security in order and make them more resilient to the increasing threat of cyberattacks. The guidelines offer concrete tools that companies can use to proactively work on digital security.
The basic principles have been developed using existing frameworks such as NIST CSF and NIS2, and were coordinated with organizations such as the AIVD [General Intelligence and Security Service], CIO Rijk, Cyberveilig Nederland, and the RDI [Dutch Authority for Digital Infrastructure]. “A small business has different resources and risks than a critical organization, but these basic principles provide everyone with clear guidance,” says Matthijs van Amelsfort, director of the NCSC. According to cybersecurity advisor Anthonie Drenth, the selected approach is both practical and widely applicable: “We analyzed existing guidelines and bundled the most relevant elements.”
The introduction of the updated basic principles is part of the Dutch Cybersecurity Strategy. From January 1, 2026, the DTC and NCSC will also continue as a single organization to further strengthen digital security support for the business community.
Healthy Life & Learning
