NIS2 and the Dutch Cybersecurity Act: what is required of you
With the Cybersecurity Act (Cyberbeveiligingswet, Cbw) the Netherlands implements the European NIS2 directive. Many more organisations must demonstrably take appropriate security measures and report incidents.
Who does it apply to?
NIS2 applies to medium-sized and large organisations in sectors such as energy, transport, healthcare, digital infrastructure, government, waste management, manufacturing and food. SMEs that supply such organisations are increasingly asked about their security as well. The Dutch government and NCSC websites show the current status and a self-assessment.
Technical measures Xcitium supports
Protection of systems
Endpoint security with containment, including against unknown malware.
Detection and response
EDR and a 24/7 SOC with full logging per device.
Vulnerabilities and patches
Up-to-date inventory, vulnerability management and patch management.
Access management
ZTNA, MFA and identity protection.
Awareness
Training and phishing simulations for employees.
Demonstrability
Compliance management and reports for regulator and auditor.
What Xcitium does not do for you
NIS2 also requires organisational measures. These remain your responsibility:
- Registration with the regulator
- Risk analysis and policy at board level
- Incident reporting procedure
- Agreements with suppliers in the chain
- Training of board members
How Spiredesk helps
We map which technical measures you already have, what is missing and which Xcitium modules fill the gaps. For legal advice we refer you elsewhere.
- ✓ Baseline measurement with the free gap assessment
- ✓ Advice on modules and priorities
- ✓ Reports for your auditor
Complete your coverage
Compliance management
Continuous checks of measures against NIS2, DORA, GDPR, ISO and more.
ViewInformation security gap assessment
Your measures compared with ISO 27001, NIST or CIS, with an improvement plan.
ViewSecurity awareness training
Managed training and quarterly phishing tests for all employees.
ViewFree gap assessment
Quick, concise or comprehensive: a first measurement against a framework.
ViewFrequently asked questions
Does Xcitium make us NIS2-compliant?
No. Xcitium supports the technical measures and provides evidence. Compliance also requires organisational measures; we help you determine what is needed.
When does the Cybersecurity Act take effect?
Check the Dutch government or NCSC website for the current status. Do not wait until the law takes effect: the measures take time.
NIS2 and the Dutch Cybersecurity Act in your environment?
In a short demo we show you how it works, discuss your situation and make a proposal. No obligation, in English or Dutch.
Product information: xcitium.com. Xcitium, ZeroDwell, OpenEDR and related logos are trademarks of Xcitium Inc.