
Robert van Vianen
The world around us is changing fast, and more and more criminals are finding their way online. The 2018 Netherlands Cybersecurity Monitor concluded that the digital threat in the Netherlands is continuing to intensify. The extent and severity of attacks is growing, yet many organisations have failed to take the necessary basic measures to ward them off, such as installing timely updates and/or software patches. Consequently, it is no longer a question of whether your organisation will sustain an attack, but when.
Like many organisations, you will no doubt have thought about how to physically secure your business premises, such as installing cameras and alarm systems. But what about your digital backdoor? Is that adequately secured? How vulnerable is your organisation to commercial espionage, sabotage or ransomware? How dependent are you on your suppliers? How have they organised their own cybersecurity?
The European Parliament also recognises the importance of cybersecurity and is encouraging EU Member States to work together in the fight against cybercrime, especially when it comes to protecting critical infrastructure such as water management, energy and telecoms. This has been formalised in the Network Information Security (NIS) Directive, which specifies that EU Member States must implement their own laws on cybersecurity. In the Netherlands, this has been transposed into national law in the form of the Cybersecurity Act, which stipulates that serious cyber incidents must now be reported to the regulatory authorities. They will monitor compliance with prescribed security measures and reporting requirements, and if necessary impose sanctions such as an administrative fine. The Cybersecurity Act covers critical infrastructure in the Netherlands, such as energy, drinking water and water management, as well as online market, cloud service and search engine providers. BDO can advise you on the consequences of the Cybersecurity Act for your organisation.
Apart from this new legislation, ISO-27000, the general standard on information security, has been in effect for many years now. We can help you to become ISO-27001-compliant. BDO can also support your organisation in implementing this standard and run a pre-certification test for you so that you are fully prepared when it comes to the actual certification audit.
Our cyber team consists of a broad range of experts: IT experts, auditors, lawyers, criminologists, behavioural experts, business administration experts, change managers and cyber experts. We strive for a team composition that will always provide you with the best possible service. We offer a comprehensive portfolio of services, including:
BDO has a presence in more than 160 countries and delivers its cybersecurity services worldwide. Our staff and offices work together on cybersecurity internationally. BDO Nederland is a member of various national and international networks, including Alert Online and the Information Security Forum. BDO is also closely involved in several public-private partnerships, such as the creation of a national network of cyber resilience centres administered by the Digital Trust Centre of the Dutch Ministry of Economic Affairs and Climate Policy. Thanks partly to these partnerships and to our experienced specialists, we will argue that understand the developments taking place in your sector and organisation. This means we can work with you to further improve your cybersecurity in a way that ties in well with your organisation.
To find out how BDO can help you find a pragmatic solution to making your organisation cyber-proof, please feel free to contact one of our specialists for an informal chat.