Data & AI

Technology and Telecommunications

Part 3: When and where is AI ethics needed?

It's nice to know that AI ethics is a must when your organization is deploying AI to solve societal problems or better serve the public. Simply putting in the money won't take you very far. Making AI work for society is the work of people after all. But how to do it then? When and where should ethical reflection on AI be introduced in public organizations?  
In this final part of the introduction series on "AI ethics for public organizations," the separate phases of AI usage are distinguished. They are related to helpful ethical questions that are specific to those phases, and we share insights on where to situate the AI ethics capability in your organization.

Thomas Mollema

Netherlands

Digital

Mitigate risks and harness potential

Part 2: AI ethics

Part 2: AI ethics: mitigate risks and harness potential

If you want to apply AI to your organization's problems, where do you start? How do you do so in line with the public values you want to protect? Like all technologies, whether AI helps or harms depends on how you use it. But ignorant use of AI is more likely to do harm than do good. This means not reflecting on how AI relates to your organization's goals and values. 'Why is AI ethics necessary for every organization using AI systems?' is therefore the second question this series of introductions on "AI ethics for public organizations" addresses.

Part 1: The basics of AI ethics

‘What really is the ethics of AI?’ We often get this question from public organizations. Joining AI and ethics might seem strange at first glance, but raising ethical questions is essential to make AI work for your organization. No automating technology is a 'quick fix' for the difficult societal problems that public organizations deal with. Only AI systems that are <a href="https://highberg.com/insights/truly-valuable-services-are-sensible-from-the-initial-design" target="_blank" rel="noreferrer noopener">'sensible by design'</a>, well thought-out, and steer clear of ethical risks succeed in helping solve large, societal challenges. Think of making health care more effective, efficiently sharing information with stakeholders, and strengthening social security and well-being.  
The role of ethics in applying AI to societal challenges is therefore worth examining.

Pride Comes Before a Fall

Is Generative AI the Digital Tower of Babel?

Imagine a mysterious disease ravaging a remote tribe in Papua New Guinea. The brains of those affected degenerate rapidly, and scientists soon discover the cause—a ritual in which the dead are consumed. This disease, later known as Kuru, spreads as the tribe literally ate themselves.
Now, decades later, we see a similar phenomenon in the world of artificial intelligence (AI). No, our computers haven’t started eating each other (thank goodness!), but something disturbing is happening: Generative AI systems (hereinafter simply AI for readability) are increasingly “consuming” their own output, with potentially disastrous consequences.
Welcome to the world of 'model collapse' and 'shitification' - two-dollar words for a multi-billion dollar problem.

Erik de Ruiter

Is Generative AI the Digital Tower of Babel? Pride Comes Before a Fall

AI ethics for public organization: A introduction series

AI ethics for public organizations

AI ethics for public organizations: A primer series

In the public debate, artificial intelligence (AI) is seen as means to increase worker productivity and provide better and more health care. AI could also speed up and automate administrative processes, distribute energy and resources more efficiently, and better detect natural hazards. AI is simultaneously a technology and a social promise. Public organizations are raising questions about AI. Should they do something with AI? How does AI relate to the problems that they must solve?

AI ethics for public organizations: A introduction series

Organizational

Risk, Resilience & Compliance

Striking a balance between security and privacy

Ethics and Zero Trust

Ethics and Zero Trust: Striking a balance between security and privacy

In the modern digital world, organisations are increasingly dependent on technology to protect their data and systems from increasingly sophisticated threats. To deal with this threat, an approach has been developed that has received a lot of attention in recent years: Zero Trust. This approach to information security is based on the principle that organisations do not automatically trust any part of the network, or the user. While Zero Trust can be an effective way to protect organisations, it also raises ethical questions regarding privacy and trust. In this article, we will explore the ethical implications of Zero Trust and how to strike a balance between security and privacy.

Martijn Hunsche

Even without a plan, GenAI finds its way into your organisation

GenAI finds its way into your organisation

‘Our employees know the risks of ChatGPT’ is a statement we hear in our daily work, but does this ring true? There are plenty of examples of generative AI (genAI for short) that have been deployed in less than optimal ways. That is why it sometimes seems better not to use it at all. Advisors and users think that deploying genAI will save costs and that you will escape all the risks everyone orates about on LinkedIn. In this blog, we offer practical guidance on how to get started with a genAI strategy.

Jules van den berg

Daan Smits

Digital Ethics

Data-Driven Work

In an era of rapid technological advancements, healthcare organizations face the significant challenge of not only exploring the possibilities of data-driven work but also ensuring compliance with the appropriate legal and ethical frameworks.

When implementing technological innovations, organizations must not only consider what is technologically possible but also carefully assess whether choices align with the values and principles of the stakeholders within the organization.

Justine de Boer

Data-Driven Work: How does your organization handle data responsibly in the healthcare domain?

Two pager: sustainably implementing Data ethics

Two pager: Data ethics

Joshua sortino Lq Khn Dz SF 8 unsplash

In recent years, data ethics has become an important topic when utilizing data and data applications. Responsible data usage is often taken as a starting point. However, in practice, sustainably implementing data ethics within organizations proves to be challenging. Over the past few years, Highberg has undertaken various projects related to data ethics. Our experience has shown that data ethics is closely linked to organizational change. Read our two pager and let us know what you think!

Marlijn Mulder

Strategy & Change

Eight Things You Need to Know About NIS2

The European Union (EU) is deeply concerned about the cybersecurity of organizations within vital sectors. The EU has introduced the Network and Information Security 2 Directive (hereinafter: NIS2) to enhance the cyber resilience of these organizations. Organizations within vital sectors are obligated to comply with NIS2 from October 18, 2024. Organizations belong to the vital sector when their service provision (temporarily) disrupts and has a significant impact on the economy and society.
In this Insight, you will read about the eight things you absolutely need to know about NIS2.

Nino van Leeuwen

Shankar Sahtie

Workshop AI for HR

Do you recognize yourself in the following situation?
You're not sure if AI is just a hype, but you also feel like you should do something with it because if it’s not a hype, you don't want to miss the AI boat.
You've read a bit about AI, but it all remains very abstract. You need an explanation in simple, straightforward language.
You want to practice applying AI tools to HR topics such as employer branding, recruitment, diversity &amp; inclusion, engagement, and employment conditions in a playful and safe way.
In that case, the practical workshop "AI for HR" is something for you and your team!

Government and Public Sector

Most important obligations in the AI Act: how to comply now?

Break through in regulation of AI: The AI Act

This text is translated from Dutch with the help of AI - On December 8, 2023, the European Union reached a preliminary political agreement on the Artificial Intelligence Regulation (hereafter referred to as the AI Act). The final text is formal approved by the European Parliament. 20 days after official publication the AI Act will enter into force. This landmark legislation marks the EU's first step towards regulating artificial intelligence, targeting developers, distributors, and users of AI systems, including those systems used for predictions, classifications, and analyses.
The potential impact on governments and businesses deploying AI systems is significant. In this insight, we'll walk you through the key obligations, how they affect your organization, and proactive steps you can take to ensure compliance.

Sabine Steenwinkel-den Daas

Germany

France

Responsible AI: how to achieve AI fairness with understanding and mitigation bias by AI

Bias in AI Explained

This text is translated from Dutch with the help of AI - "Tell me honestly, what's your biggest fear when it comes to algorithms and AI?" When I ask people this question, the response often is, "AI-systems discriminate!" And of course, discriminating is far from desirable. But how do we ensure that algorithms don't discriminate?
First and foremost, it's important to understand that algorithms themselves do not discriminate. However, algorithms can be developed in ways that lead to unwanted or undesired distinctions in representation of groups in the result. This is commonly referred to as "bias" in technical terms. 
Essentially, if you have control over the bias within the algorithm, you also minimalize discrimination. In this insight, I will explain how to achieve this. Let's start by answering the question: What is bias?

Control AI risks and make impact: top criteria for responsible deployment of AI systems

In control of your AI systems

This text is translated from Dutch with the help of AI - Have you ever heard or said within your organization, "We're working with data/algorithms/AI" or "We have plenty of data initiatives, but scaling within the organization is challenging"? These questions all boil down to one main question: How do you ensure that you apply the right algorithms in the right way?

When is transparancy on AI sufficient? Comply to the AI Act with an algorithm registry?

Transparency with algorithm registry?

This article has been translated from Dutch with the help of AI: In an era where algorithms exert increasing influence on our daily lives, maintaining control over the latest developments and being transparent about them is more important than ever. This leads us to a crucial question: when is the openness and transparency surrounding these algorithms sufficient? The answer is not simple, because transparency goes beyond just registering the algorithm. In this article, we delve deeper into the steps needed to start working on transparent and responsible use of algorithms at 5 maturity levels.

Discover the importance of data subject rights under the GDPR

Why the rights of data subjects are important

Waarom de rechten van betrokkenen onder de AVG zo belangrijk zijn

In today's digital world, personal data is everywhere. The General Data Protection Regulation (GDPR) grants individuals specific rights regarding their personal data. But why are these rights so important, even if people rarely actively use them?

Frank van Vonderen

Why the rights of data subjects under the GDPR are so important?

Discover the crucial privacy requirements to consider when selecting a SaaS provider

Privacy requirements for a SaaS supplier

Essentiële privacy eisen voor het kiezen van een Saa S leverancier

Choosing a SaaS provider is a decision that goes beyond just functionality and price. In a world where data is one of the most valuable assets of an organization, privacy and data protection are becoming increasingly important. But what are the key privacy requirements that a SaaS provider must meet?

Essential privacy requirements for choosing a SaaS supplier

Privacy by Design: protection at the heart of algorithms

Is Privacy by Design important in algorithms?

Privacy by Design: Protection at the heart of algorithms

What is Privacy by Design?

Privacy by Design is a strategy that focuses on integrating privacy protection into technological products and systems from the outset. This approach means that privacy is a fundamental part of the design process, rather than an addition or adjustment made afterwards.

How can organizations make privacy by design concrete and actionable?

Het concreet maken van Privacy by Design

Making Privacy by Design Concrete: Practical Steps for Implementation

In today's digital age, where data is ubiquitous and privacy concerns are at the forefront, incorporating privacy by design principles into the development of products and services is paramount. Privacy by design refers to the practice of considering privacy and data protection from the outset of the design process, rather than as an afterthought. But how can organizations make privacy by design concrete and actionable?

Learn how your organization must act in the event of a data breach, under the GDPR

Navigating a data breach: step-by-step

A data breach is like an unexpected storm in the world of data protection. It can happen to anyone, but rest assured: the GDPR offers an umbrella in this storm. This blog guides you step by step through the process of managing a data breach according to the GDPR, so your organization can quickly become dry and safe again.

Organizations are required to keep such a register, what are the benefits?

Benefits of register of processing operations

What is a Record of Processing Activities (RoPA)?

What is a Record of Processing Activities (RoPA)?


A Record of Processing Activities is a detailed overview in which organizations document how personal data is processed. This includes information about the types of data collected, the purpose of the processing, with whom the data is shared, and how it is secured. According to the GDPR (General Data Protection Regulation), organizations are required to maintain such a record.

Benefits of a register of processing operations under the GDPR

Are your actions complying with the GDPR? This guide will help you navigate the GDPR

How to know if it's allowed under the GDPR?

How to know if something is allowed under the GDPR

Since its introduction in 2018, the General Data Protection Regulation (GDPR) has brought about many changes in how companies handle personal data. However, understanding the GDPR can be challenging, and it is often not immediately clear whether certain actions are allowed. This blog post provides a clear explanation of how you can determine if your practices are in line with the GDPR.

How to know if something is allowed under the GDPR: a practical tool

Having a DPO is essential to comply with the General Data Protection Regulation (GDPR)

How to find a DPO that fits your organization

Hoe vind je een Functionaris Gegevensbescherming (FG) die perfect bij je organisatie past

In an era where data protection and privacy are becoming increasingly important, finding a suitable Data Protection Officer (DPO) becomes a crucial task for many organizations. Whether it's a large corporation, an SME, or a non-profit organization, having a competent DPO is essential to comply with the General Data Protection Regulation (GDPR). But how do you find a DPO who fits perfectly with the needs and culture of your organization? Here are some tips.

How to find a Data Protection Officer (DPO) that fits your organization perfectly

Creating a data transfer impact assessment: a step-by-step guide

The importance of a DTIA

Hoe voer je een DTIA uit

In the era of globalization and digital expansion, data is continuously sent around the world. As a result, a Data Transfer Impact Assessment (DTIA) has become essential. This assessment helps organizations evaluate the risks and compliance requirements associated with transferring personal data across borders. In this blog, we will take you step by step through the process of creating an effective DTIA.

How do you conduct a DTIA?

How policymakers can make ethical and measurable trade-offs when using AI and algorithms

The Importance of an Ethical Framework

Welcome to the Dynamic World of AI and Algorithms! These technologies are transforming our lives, but they also bring ethical challenges. How do we ensure that AI is fair, transparent, and accountable? We focus on establishing an ethical framework for policymakers and the general public, with steps and criteria for ethical considerations in the world of AI.

Small college perform better Learning analytics offers opportunities for large institution

Scale affects study yield

Uit de data blijkt schaal is ook in hoger beroepsonderwijs van invloed op studierendement

Data shows: scale also influences study efficiency in higher vocational education   

What do the data tell us about the quality of education and study efficiency in higher vocational education? And what tools do the data offer for improving this? We have collected, analyzed and visualized open data on higher vocational education in a dashboard. This dashboard can be found on our website.   

From the analysis it can be seen that the study efficiency after 5 years of education in HBO has decreased by about 10 percentage points since 2002. Whereas almost 60% of the students who started their studies in 2002 (the so-called 2002 cohort) graduated in 5 years, this is only about 50% for students who started 10 years later. 
For universities, the smaller ones do better than the larger ones. This is also true for colleges of higher education. The dashboard shows that large institutions (with more than 20,000 students) score below the national average (the black line in the figure) on study efficiency. However, the gap with the national average has narrowed substantially since the 2000 cohort. 
To better understand the relationship between student success and institution size, we performed a correlation analysis. 
This clearly shows that the small institutions are doing better than the large institutions: the small institutions are in the top left of the figure and the large ones in the bottom right. 
One explanation for the better performance of small institutions may be that they offer very specific degree programs (especially in the arts, agri-business and based on a specific foundation/signature). 
Students who choose these institutions are thus making a more conscious choice for a specific program. In academic education, this can be seen at Wageningen University. This university has come out on top in the Study Choice Guide every year since 2004. Students who choose this university in "provincial village" Wageningen must be "very motivated," according to the guide.

Gijs de Groot

Data shows: scale also affects study efficiency in higher vocational education

Student characteristics predict academic success. Customized support possible

Chracteristics as study success predictors

Learning Analytics Kenmerken van studenten als voorspellers voor studiesucces

In the previous blogs, we explained what learning analytics is. We also used a dashboard to show how scale in higher vocational education affects study success and what interventions are possible based on this information. However, scale of an educational institution is not the only variable that affects study success. After all, students differ from one another. Are there certain types, or profiles, of students who do better than others? In this third and final blog of this series, we will look for an answer to this question, again using the dashboard.

Learning analytics: student characteristics as predictors of study success

Centralized, decentralized or hub and spoke? Efficient collaboration, clear structure.

The hub and the spokes

De naaf en de spaken hoe organiseren we onze data expertise

How do we get more out of our data? We ask our data specialists, but where are they in our organization? In a separate corner behind big screens and fat computers, among employees in departments or somewhere in between?

The hub and the spokes: how do we organize our data expertise?

Effective visualizations: Audience, setting, omitting, imagery, clarity, color.

This is how to deal with visualization urges

Zo ga je om met visualisatiedrang 6 tips voor de vormgeving van visualisaties

Because visualizations within organizations can be created in many ways, the search for the right form is on. Design choices affect the outcome. The content may be seemingly identical, while a powerful design ensures that the message is better understood or comes across better. The following 6 tips will help in the choice of design. 

Tip 1: Choose a clear target audience for the visualization. 
A director does not want complex Excel sheets, while others want to study the details. Therefore, match the message to the target audience. If the target group is organization-wide make sure it is accessible to everyone and keep it as simple as possible. 

Tip 2: Choose the setting in which the visualization should land. 
Is it a report from tooling, the report and presentation of a study, a communication message, a drawing on whiteboard/flip chart, a supplement to a quotation, etc., the setting gives direction to the design. A communication message should only be about the message, while a visualization in a quotation should be visually appealing and also support content. 

Tip 3: The art of omission. 
Ask whether it is really necessary to present certain information. The more information is left out the more focus there is for what is left. This makes a discussion much more specific and gets people thinking in a more focused way. 

Tip 4: Within visualizations, use figures instead of text. 
If, within a visualization, a word or phrase can be replaced with a figure, it is easier to understand and sticks better. This works the opposite way if the chosen figure is not sufficiently clear, then discussion and ambiguity will arise. 

Tip 5: Provide overview within the field of view. 
For example, an infographic fits into one page, but if there is a lot on it, the message is lost. On the other hand, if there are more visualizations for the same topic, ask yourself if it can't be combined in clickable selections, for example. 

Tip 6: Use lots of color. 
Dark colors are more likely to be boring. Bright colors appeal, but are not always easy to see or it is childish. Therefore, when adding color, always make sure it is the right shape and accessible. 

Extra tip: Contact me to go over even more considerations for creating powerful visualizations.

Douwe Horst

This is how to deal with visualization urges: 6 tips for designing visualizations

Improvements in data quality drive process optimization, creating an upward spiral.

Data in order? Improve your processes too

Data op orde

Data is increasingly put in order as a result of attention to data management. It is forgotten that this leads to improvements in the primary and supporting processes, resulting in fewer errors and higher effectiveness. These process improvements, in turn, ensure that the data quality increases, resulting in a self-reinforcing effect. So after putting the data in order, don't forget to improve the processes. 

I meet more and more organizations that are serious about data management. This is to comply with the AVG (General Data Protection Regulation) but also because they can realize their ambitions such as information-driven work on the basis of data. When complying with the AVG, the focus is on what data may and must be retained and who has access to this data. With information-driven work, it is mainly the search for data on which control can take place. 

As a result, data has increasingly been put in order. In other words, an inventory is made of the data present within the organization, because there is often no overview of it, and then it is placed in a suitable location with appropriate authorizations. But all too often I see that it is then forgotten to make better use of this data in the primary and supported processes.  An open goal is missed. 

An example of this in the primary process is putting client files in order in a healthcare institution. The added value of this becomes much greater if one then looks at how this data can be used effectively and efficiently by employees. What information do they need in order to best help the client in specific cases? How can we ensure that precisely this information is easily and quickly extracted from the file? 

Another example is the deployment of steering information. Based on this data, the quality of the capacity management of employees in support processes can be examined, or where in administrative processes the greatest delays occur. This often turns out to be low-hanging fruit because it takes little time to identify improvements. 

and if process improvements are achieved in this way, this also leads retroactively to further strengthening data quality. After all, when processes have fewer errors and are more effective, data quality also increases. This creates a self-reinforcing effect. 

If you want to know where data-based process improvement can be achieved for your organization, please contact me.

Data visualization drives data-driven decisions: Insights, efficiency, informed choices.

Storytelling with datavisualization

Storytelling met datavisualisatie

Governments want to work in a data-driven way, using data to design policy and implementation more efficiently. This starts with making the data accessible, offering insight into the data and thereby telling the story. Data visualization and dashboards offer a low-threshold method for this, and directly help to work and steer in a data-driven manner.

When is protection truly effective? How can you measure it?

Status information Security & Privacy Policy

How Effective Is Your Information Security and Privacy Policy? Measure It!

In today's increasingly digital world, effective information protection is a pressing concern. It's common to discuss information security and privacy, but when is protection truly effective? How can you measure it? Often, we measure that we are doing the right things (compliance), but not whether data is effectively protected. However, in practice, the latter is the most crucial aspect. After all, you do these things to prevent data breaches or information security incidents.

The question is not whether there will be casualties as a result of a cyberattack but when

Vulnerability SCADA to Cybersecurity Attacks

Vulnerability of SCADA Systems to Cybersecurity Attacks

Many different organizations and companies use SCADA/ICS (Supervisory Control and Data Acquisition/Industrial Control Systems) systems in various ways in their primary (production) processes or products. This includes manufacturing companies, control of bridges and locks, electric cars, equipment in intensive care units, as well as pacemakers and wireless insulin pumps. IoT (Internet of Things) is also playing an increasingly significant role in this context.

Koos van der Spek

Is a new trend emerging in the world of hackers: data leaks as a business model?

Data Leaks as a Business Model?

Cyber Extortion: Data Leaks as a Business Model?

Is a new trend emerging in the world of hackers: data leaks as a business model? With the worst of the GDPR (General Data Protection Regulation) storm settling down and the era of "can't do it, it's against GDPR" hopefully behind us, hackers are discovering a new source of income: fear of fines.

Bart Giesbers

Where lies the Ownership of Risks and Measures in Information Security?

Ownership of Risks in Information Security

Information security is everyone's responsibility! Most people who have ever been an audience member for a presentation on this subject have heard the above statement at some point. It's a true statement but one that remains somewhat cryptic in practice for many.

Steven Debets

Other organizations have realized that it would have been handy if there had been a BCP.

Questions Your BCP Should Answer

Over the past few weeks, many organizations have been able to put their business continuity plans (BCP) into practice. Other organizations have realized that it would have been handy if there had been a BCP. Which category does your organization fall into? In any case, we've all been busy brainstorming scenarios and gathering data to gain control over the things coming our way.

We've selected five measures that you should take to enhance your cyber resilience.

Five Measures to Increase Cybersecurity

Five Essential Measures to Increase Cybersecurity and Cyber Resilience

Companies and governments will need to pay much more attention to cyber resilience to prevent serious damage in the future.

Cyber incidents are having an increasingly significant impact: Reduce this response time.

Cyber Crisis Management: Joint Responsibility

Cyber Crisis Management: A Joint Responsibility

In two-thirds of organizations, it takes a minimum of two hours to take action after discovering a cyber incident. For one-fifth of organizations, it takes more than four hours. This information comes from the international study Cyber Resilience 2016 by the Business Continuity Institute. Considering that cyber incidents are having an increasingly significant impact, it's essential to reduce this response time. But what causes so much time to be lost?

Increasingly concrete threats posed by the digitally interconnected world.

Cloud Strategy & Security: Collaboration?

Cloud Strategy and Security: Seeking Collaboration

Cybersecurity is the central theme of this year's Business Continuity Awareness Week, and it's no wonder. Individuals and businesses are feeling more vulnerable than ever due to the increasingly concrete threats posed by the digitally interconnected world.

Part 2 addresses the disadvantages, risks, and possible next steps.

Digital Euro: A Blessing or a Curse? Part 2

The Digital Euro: A Blessing or a Curse? Part 2 – Disadvantages, Dangers, and Next Steps

This is Part 2 of a two-part series of articles on the digital euro. Part 1 discussed the background and emergence of the digital euro and its potential advantages (you can read Part 1 here). Part 2 addresses the disadvantages, risks, and possible next steps.

Paul Helmich

This part covers the background and rise of the digital euro and its potential benefits.

The Digital Euro: Blessing or Curse? Part 1

The Digital Euro: Blessing or Curse? Part 1 – Background, Rise, and Benefits

This is Part 1 in a series of 2 articles about the digital euro. This part covers the background and rise of the digital euro and its potential benefits. Part 2 discusses the drawbacks, risks, and possible next steps (you can read Part 2 here).

In this blog, you will learn what you absolutely need to know about DORA.

Seven Things You Need to Know About DORA

The European Union (EU) is deeply concerned about IT risks and cybersecurity in financial sector organizations. They respond with the Digital Operational Resilience Act (DORA) to the increasing digitization within the financial sector and the growing threats from (cyber)criminal organizations and hostile powers.

How do we address the ongoing vulnerability of these systems?

Security of SCADA: Which Standard to Choose?

The Security of SCADA: Which Standard to Choose?

Recently, the results of a study by the University of Twente on the security of Dutch SCADA systems were presented. The research once again revealed that the security of these systems is far from adequate. Hundreds of components of SCADA systems with direct connections to the internet were found, which is a security risk. The question is, how do we address the ongoing vulnerability of these systems?

Floris Baauw

It is interesting to note that hackers are increasingly targeting the medical sector.

Security in the Biomedical Sector

Is There Also Attention to Security in the Biomedical Sector?

In January of this year, documents related to the Pfizer/BioNTech vaccine were published by hackers. These documents were obtained from the European Medicines Agency (EMA) while it was in the process of approving the Pfizer/BioNTech vaccine for the European market. Various media outlets subsequently claimed that a state actor was behind the hack. Whether it was a state actor, a hacking collective, or a lone wolf, it is interesting to note that hackers are increasingly targeting the medical sector.

Part two delves deeper into the reporting obligations under the Cybersecurity Act

Cybersecurity Act Focuses on BCM - Part 2

The Network and Information Systems Security Act (Cybersecurity Act) Focuses on Business Continuity Management (Part 2)

The Network and Information Systems Security Act (Wbni), commonly known as the Cybersecurity Act, aims to enhance digital security in the Netherlands. This Cybersecurity Act is based on the European Union's Network and Information Security Directive (NIS Directive), which encourages member states to improve their digital resilience and collaborate more effectively. In this two-part series, we focus on this new legislation. In our previous blog, we discussed who this legislation applies to and what mandatory measures are required. Part two of our series delves deeper into the reporting obligations under the Cybersecurity Act.

Dorus-Jan ten Boom

Management Consultant Digital Law & Ethics

Capabilties

Related Insights