Risk, Resilience & Compliance

Government and Public Sector

Financial Services

Clarity on GDPR roles: when to use a processor agreement and when it’s unnecessary

Everyone needs a data processing agreement!

People talking in a meeting at a desk with laptops

“Better safe than sorry,” “better too many than too few,” and “fire is worse.” All true, but still not a reason to start signing agreements unnecessarily. Yet this is exactly what I now see happening on a large scale. Organizations that share data are massively sending each other data processing agreements. And not just to each other: their own employees, the Tax Authority, and the company doctor are also being dragged into it. Please don’t forget to fill in annexes 1 through 4 yourself, in the name of the GDPR. No processing without a processing agreement. Or is there? Let’s start at the beginning.

Dorus-Jan ten Boom

Netherlands

GDPR roles: when to use a processor agreement and when it’s unnecessary

Organizational

Culture Development

Building one culture together for the national cybersecurity organization

Culture as the foundation for change:

Pexels canvastudio 3194524

How the NCSC and the DTC, together with Highberg, are building a shared identity for one national cybersecurity organization.

Anne de Brouwer

How the NCSC and the DTC are building a shared identity for one national cybersecurity organization with Highberg

People

HR & People Analytics

An interview with Data Scientist Lea Thormählen at Highberg

What's it like working as a Data Scientist?

Lea Thormählen

At Highberg, data science plays a key role in helping organizations make informed, evidence-based decisions. To give you a closer look at what this work entails, we spoke with one of our Data Scientists, Lea Thormählen, about her role, the types of projects she works on, and what it’s like to be part of the Highberg team. From equal pay analyses to building dashboards and collaborating with colleagues across disciplines, their experience highlights both the technical challenges and the real-world impact of data science.

The Role of a Data Scientist at Highberg: Lea Thormählen

Strategy & Portfolio Management

Key insights from the Highberg Portfolio Management Round Table

Highberg Portfolio Management Round Table

People business meeting high angle

On June 24, 2025, Highberg hosted 25 portfolio managers to share challenges and best practices. Key insights included: clear and adaptive governance, realistic planning for lean budgets, early and simple KPI setting, and prioritizing initiatives based on strategic value. The event showed that effective portfolio management balances structure with flexibility and focuses on real value delivery. Participants agreed to continue these exchanges every six months.

Bas Wolting

Digital

Organisatie

Government and Private Sector

Why culture can't be an afterthought

The sense of belonging in M&A

Merger and Acquisition image

Mergers and acquisitions often focus heavily on financial and operational integration, yet overlook one of the most critical factors for long-term success: cultural integration. A strong sense of belonging is a fundamental human need that drives engagement, performance, and retention. When disrupted during M&amp;A, it can lead to friction, disengagement, and costly turnover. This whitepaper explores the psychology behind belonging, its role in the workplace, and practical strategies for fostering a unified culture during mergers—drawing on Highberg’s firsthand experience and real-world case studies.

Merel Wensink

Sophie Loquet

The sense of belonging in M&A: Why culture can't be an afterthought

Data Management & Data Governance

Where and When Are Data Management and Governance Needed?

Data Management and Governance

Mountains 5819652 1280 1

Your organization wants to take data-driven working seriously, but the question is: where do you start? Everything seems important—every system holds data, every process calls for control. You consider a broad program, but get stuck in complexity and slow-moving structures. Meanwhile, risks persist and opportunities are missed. Recognizable? You’re not alone.

Bjorn Cordia

Balancing Defensive and Offensive Data Management

Grip and Value

Path 4342242 1280

Your organization has more and more data available, yet it's a constant struggle to use this data strategically while also complying with regulations. One team focuses on innovation and dashboards, while another is concerned with GDPR compliance, data quality, and audit trails. You notice: without a balance between control and utilization, the promise of data-driven work remains largely theoretical.

Grip and Value: Balancing Defensive and Offensive Data Management

Why Data Governance and Data Management Make the Difference

From Ambition to Practice

Road 3114475 1280

You want to steer more quickly and effectively on societal challenges, but receive reports whose reliability you cannot assess. Your organization collects a lot of data, but definitions vary, ownership is lacking, and innovations get stuck due to fragmented information. There is an abundance of data – but oversight, control, and trust are missing.

From Ambition to Practice: Why Data Governance and Data Management Make the Difference

Diversity, Equity & Inclusion

Whitepaper: Accelerating DEI in 2025

Accelerating DEI in 2025

Untitled design 87

Diversity, Equity, and Inclusion (DEI) has traditionally been shaped by external forces, reflecting the broader societal winds that influence our collective mindset – now those winds are shifting. Over the past few years, DEI has faced an unexpected challenge: a growing pushback. 

Amid growing public debate, concerns around DEI have been amplified by a new mix of politics, online commentary and economic uncertainty. In some circles, DEI is increasingly portrayed not as a pathway to greater inclusion, but as a source of division — reflecting broader tensions around identity, fairness, and belonging. 

This message resonates particularly with individuals who perceive themselves as sidelined by globalization, disadvantaged by economic change, or alienated by evolving cultural norms. 

The result is DEI is no longer just under scrutiny. It’s under pressure. Download the whitepaper to discover how to turn DEI backlash into an opportunity for deeper, more sustainable change.

Iris Hameetman

Chiara Kutschera

Alice Meyer-Delvendahl

Gido van Puijenbroek

We Have the Corrected Pay Gap, Now What?

Artur d z r RJHUP Uc8 unsplash

Throughout the previous blog posts, we have explored the importance of using an advanced Equal Pay methodology, the available techniques, and their strengths and weaknesses. Calculating the gaps is a key milestone. But it is just that: a milestone, not the finish line. The real work lies in understanding what is behind that gap and deciding how to close it. So, you have those crucial figures: your gender pay gap and equal pay gap, now what?

Ninande Vermeer

Why did we choose our methodology: Rake?

Aleksei anatskii Od J r0ojah8 unsplash

So far, we have explored the <a href="https://highberg.com/insights/pros-and-cons-of-the-regression-based-techniques" target="_blank" rel="noreferrer noopener">strengths and weaknesses</a> of regression-based equal pay methods. Now let's focus on the weighing-based approach: our Rake method. We explore how it works and what its advantages and disadvantages are.

Deep dive in issue on misalignment reporting requirements vs corrected gap

Misalignment: Reporting vs Corrected Pay Gap

Mathieu stern 1z O4 O3 Z0 UJA unsplash

In <a href="https://highberg.com/insights/pros-and-cons-of-the-regression-based-techniques" target="_blank" rel="noreferrer noopener">our previous blog post</a>, we explored the pros and cons of regression-based methods for analyzing the gender pay gap. One of the key drawbacks we touched on for Multiple Linear Regression (MLR) and the Pay Prediction approach is that the way the equal pay gap (= corrected gender pay gap) is calculated does not align with the legal definition used for reporting.
But what does that really mean? Let’s break it down.

Pros and cons of the regression-based techniques

Pros and cons of regression-based techniques

Female worker presenting visual templates coworkers

In <a href="https://highberg.com/insights/what-equal-pay-methodologies-are-out-there" target="_blank" rel="noreferrer noopener">our latest blog</a>, we have introduced the main Equal Pay methodologies: Multiple Linear Regression (MLR), the Oaxaca-Blinder Decomposition (OBD), the Pay Prediction approach, and the Rake method. Now, let’s first take a closer look at the main strengths and limitations of regression-based approaches.

What Equal Pay methodologies are out there?

Working girls with papers table

In our <a href="https://highberg.com/insights/beyond-the-numbers-why-the-nominal-gender-pay-gap-isnt-enough" target="_blank" rel="noreferrer noopener">previous blog post </a>we explored the value of using an advanced equal pay methodology: it offers deeper insights into the root causes of pay gaps and supports with legislation like the EU Pay Transparency Directive. That naturally leads to the next question: what methodologies are available? In this blog post, we share with you several methods we have come across in our field of work.
Side note. In this blog series, we take the gender equal pay analysis as an example, but of course also other (two) groups can be compared, for example Western versus non-Western employees.

Understanding Equal Pay in Light of the EU Pay Transparency Directive

Why the Nominal Gender Pay Gap Isn't Enough

People using digital device while meeting

Within Highberg we look at the topic of Equal pay from both an organizational and a legal perspective, but also through a methodological lens. After all, People Analytics is one of our expertise. There is not one way to Rome, and the same counts for doing an Equal Pay analysis. But you might ask yourself which methodologies are available, what benefits or disadvantages they have, and the ultimate question: which method to choose? In this blog series we will explore just that. We will explore the different Equal pay methods we have seen in our field of work, the pros and cons of each, and which one we prefer. But, before we deep dive into the details, why do you even need a "method" when working on Equal pay?

Beyond the Numbers: Why the Nominal Gender Pay Gap Isn't Enough

Cyber Security & Continuity

What is happening and how your organization can respond quickly

Citrix Bleed 2:

Hacker cracking binary code data security

In recent weeks, a critical vulnerability has been discovered in the widely used remote work system Citrix NetScaler(ADC or Gateway). This vulnerability, known as Citrix Bleed 2 (CVE-2025-5777), allows attackers to gain access to systems via active sessions without requiring login credentials or multi-factor authentication (MFA). It has now been confirmed by, among others, the Dutch National Cyber Security Centre (NCSC) and the Digital Trust Centre (DTC) that this vulnerability is actively being exploited. As a result, thousands of organizations worldwide are at risk.

Arjen Bol

Luna van Vilsteren

Mathijs Dubbe

Citrix Bleed 2: what is happening and how your organisation can respond quickly

Striking the balance between compliance and responsiveness

Target Operating Models

Green mountains with blue sky

In today’s highly regulated industries — from finance to pharmaceuticals to public services — organizations face a delicate balancing act. They must operate with stability, precision, and predictability, ensuring full compliance with evolving regulatory requirements, while also staying responsive to shifting customer expectations, competitive pressure and changes in legislation. Designing and implementing an effective operating model that enables an organization to tackle both these sides can be challenging. 
There are many reasons why organizations in a highly regulated industry find it challenging to develop an effective and long-term operating model that strikes the balance between responsiveness and operational stability. Highberg has identified a set of key factors that, in our experience have a strong impact on achieving this golden balance: complex regulations and compliance, siloed organizational designs, and lastly, a risk-averse culture and mindset.

Valerie Gögel

Target Operating Model in a highly regulated environment: Striking the balance between compliance and responsiveness

Strategy & Change

How governmental organizations fail to execute on their policies

Overcoming the Policy Implementation Gap

What do the energy transition, the digital transformation of the Dutch National Police, and the digitalization of the Dutch National Archive have in common? These are all large-scale initiatives with high impact, crucial for the future and the greater good. Yet, despite their importance, they all ended up far from meeting their forecasted budgets, timelines, and expected outcomes. 
These failures are not simply poor planning; they reflect a much deeper issue: the inability of governmental organizations to effectively execute their own policies, regardless of how well-intentioned or carefully crafted those policies are.

Niels Groen

Noah van Kessel

Highberg's Transformation Consultant Talita Lemes

A Day in the Life of:

Talita Lemes

In this article, Transformation Consultant Talita opens the door to her busy yet rewarding world: from onboarding client teams and designing innovation frameworks, to aligning strategy with execution in an increasingly technology-driven landscape. She shares how Highberg empowers her with continuous development opportunities and a collaborative environment, enabling her to accelerate impact not only for clients but within the broader societal and sustainability mission of the firm.

A Day in the Life of a Transformation Consultant at Highberg: Talita Lemes

Day in the life of a Change Consultant at Highberg

Change Consultant Casper Groenink:

Casper Groenink Linked In post 2

Casper Groenink is a change consultant at Highberg. In the interview below, he provides a glimpse into his daily work. Casper shares how he helps organizations with transformation and change challenges. He talks about the balance between substantive work, internal collaboration and the dynamics of consultancy.

Casper Groenink

Day in the life of a Change Consultant at Highberg: Casper Groenink

Beloning

Is your organization ready? Our SaaS solution provides the answer

EU Directive Pay Transparency in 2026:

Is your organization ready for the EU Directive Pay Transparency in 2026?

Major changes in wage transparency legislation are about to be implemented and will directly impact companies across the European Union. The EU Pay Transparency Directive on wage transparency is in the implementation phase and requires organizations to disclose job and salary structures, create pay gap reports, and take action to ensure fair remuneration. Since all EU member states must incorporate the directive into their national legislation by 2026, companies with more than 100 employees (both public and private organizations) will be required to report pay gap data.

Henrieke van Bommel

HR Business Partner at Highberg

Interview with Marleen Werkhoven

Marleen Werkhoven

Marleen Werkhoven, HR Business Partner at Highberg, gives us a glimpse into her daily work and the unique dynamics of working within a growing organization. From strategic projects to conversations with colleagues: her role is both multifaceted and impactful. Curious about what makes her work so interesting and what a day in the life of an HR Business Partner looks like? Keep reading.

Day in the Life of an HR Business Partner at Highberg: Marleen Werkhoven

Balancing Accountability and Transparency

Case study Government Policy Organization

Binnenhof 1453078 1280

A policy organisation within the Dutch central government faced the challenge of collecting, processing, and making large volumes of digital communication—such as chat messages, documents, and emails—available in a structured and careful manner. The urgency stemmed from increasing pressure due to accountability legislation, such as the Open Government Act (Woo) and the Archives Act.

Case study Government Policy Organization: Balancing Accountability and Transparency

In executing their strategy to improve timetables

Highberg supports NS

Untitled design 2

The NS chain “Specific Days” was facing a decline in timetable quality combined with increased workload for its employees. This was primarily caused by shifts in passenger behavior following the COVID-19 pandemic, staff shortages, and a growing number of last-minute changes in rail maintenance. Due to these developments—alongside high work pressure and the ad hoc nature of the chain—NS struggled to internally shape and sustainably implement the necessary changes.
As a result, Highberg was brought in to analyze bottlenecks within the chain, design a future vision, and implement it iteratively. This led to annual savings of €300,000, measurable cultural shifts, and improved employee satisfaction.
The project lasted ten months and consisted of analysis, design, and implementation phases, all carried out using an agile approach.

Highberg supports NS in executing their strategy to improve timetables

Business Agility

IT Projects in the public sector: Lessons from practice

Don't forget the organization:

Don't forget the organization: IT projects in the public sector – Lessons from practice

Government IT projects often fail not because of technology, but due to structural flaws in planning, organization, and execution. Issues such as deliberate deception, excessive optimism, and rigid governance lead to delays and cost overruns. The solution lies in Adaptive Flow: a flexible, iterative approach that sets realistic goals, monitors progress, and addresses organizational bottlenecks. Without attention to the organization, digital innovation remains ineffective.

IT projects in the public sector: Lessons from practice

Responsible AI

Why the Public Sector can't do without Explainable and Responsible AI

Public Sector: Explainable and Responsible AI

The public sector stands at a turning point with the rapid rise of artificial intelligence. As AI systems increasingly shape how public services are delivered, the question is not whether we use AI, but how we do so responsibly. This article outlines the importance of building an ethical infrastructure around AI, with a central role for explainable AI. By focusing on transparency, accountability, and monitoring, public organizations can ensure that AI serves democratic values and reinforces trust between government and society.

Thomas Mollema

Sebastiaan Streng

Mastering Solution-Level Application Integrity Across Multiple ARTs

Agile Orchestra sounds like a Garageband?

When Your Agile Orchestra Sounds More Like a Garage Band

The article compares coordinating multiple Agile Release Trains (ARTs) to a jam session - great when in sync, chaotic when not. It outlines seven common pitfalls in large-scale Agile development, like inconsistent coding, broken dependencies, and unclear testing. The solution: align teams with shared standards, strong automation, centralized configuration, and clear communication. The goal is to maintain creativity without compromising application integrity.

Davar Azarmi

When Your Agile Orchestra Sounds More Like a Garage Band!

Digital Strategy & Execution

Unlocking Real Impact in Government Digital Strategies

Coherence Is Key:

Digital Transformation in the Public Sector: From Fragmentation to Coherence

Digital transformation in the public sector is no longer a choice, it’s a necessity. Yet many organizations struggle to turn ambition into action. Legacy systems, fragmented responsibilities, and shifting regulations often stand in the way of meaningful progress. True transformation requires more than new technology: it demands coherence—between policy and execution, between IT and strategy, between innovation and real-world impact. At Highberg, we help public organizations build that coherence, with a focus on value, agility, and long-term societal benefit.

Wilbert Enserink

Anne van Esch

Martin Ruiter

Coherence Is Key: Unlocking Real Impact in Government Digital Strategies

How complexity demands different Risk- and Project Management

IT Projects Break all the Rules

In my 30 years working in consulting, helping large organizations to navigate the challenges of large-scale software development, I’ve learned a hard truth: Managing IT projects with traditional project management and risk frameworks does not work. No matter how much rigor you apply, no matter how many “good practices” you adopt, IT projects stubbornly defy predictability.

Ralph Hofman

IT Projects Break all the Rules: How complexity demands different Risk- and Project Management

Part 13: No hidden interfaces

Design principles for the computer scientist:

Design principles for the computer scientist (Part 13)

A principle for the information scientist is "decoupling points for complexity reduction and flexibility". But a decoupling point is also a coupling in the system as a whole! All interfaces must remain visible, if you come across one you must recognize it. This applies to the same extent for the organizational scientist; organizations also have interfaces and dependencies and these must be visible.

Rutger Gooszen

Design principles for the computer scientist: No hidden interfaces

Strategy Development & Execution

Energy and Utilities

Unlocking the Execution Challenge of the Energy Transition

From Planning to Progress:

Energy in Transition: The Culture, The Challenges and The Opportunities

The Dutch energy sector is facing its greatest transformation since WWII, as electricity demand rapidly outpaces the grid’s capacity. Grid operators must expand, reinforce, and digitalize their networks faster and smarter, while fundamentally rethinking how the energy system is planned and governed. This challenge goes beyond infrastructure, it requires a shift in mindset, strategy, and societal responsibility. As public institutions, grid operators play a vital role in ensuring the transition is not only effective, but also fair, inclusive, and widely supported. At Highberg, we are proud to support them in shaping a resilient and equitable energy future. The transformation these companies are undergoing offers valuable insights into the broader shifts shaping the sector. From our experience, real progress depends on five key transformation themes: Operational execution, external collaboration, competency development, strategy execution and performance driven culture.

Sjoerd Hogenbirk

Ralph den Bosch

Bob Verstraten

From Planning to Progress: Unlocking the Execution Challenge of the Energy Transition

Sustainability

Technology and Telecommunications

Royal FloraHolland takes control of its data to make smarter decisions

Case study Royal FloraHolland

Royal FloraHolland, the world’s largest flower auction cooperative, needed a more effective way to track the performance of its software teams. These teams work within an Agile framework, where multiple teams collaborate and release software updates in synchronized cycles, known as Agile Release Trains (ARTs). While this approach allows for faster delivery, it also creates complexity in tracking team performance across various areas. Performance data was scattered across various systems, making it difficult for management to get a clear, unified view of how the teams were performing. As a result, leadership struggled to effectively track progress, identify potential bottlenecks, and optimize team performance to support the business’s fast-paced needs.

Case study: Royal FloraHolland takes control of its data to make smarter decisions

Employee Experience

What it is and how to use it effectively

Employee Net Promotor Score (eNPS) explained:

Levi guzman zd Soe8za6 Hs unsplash

Employee Net Promoter Score (eNPS) is a concept that has been used since the 1990s. eNPS provides insight into the extent to which employees recommend an organisation. eNPS is popular because it is easy to measure, calculate and benchmark.

Employee Net Promotor Score (eNPS) explained: What it is and how to use it effectively

Whitepaper: FinOps - The Key to Cloud Cost Management

Download the whitepaper here.

Related Insights