What applies and when
Dutch Cybersecurity Act from 15 August 2026
Duty of care, reporting deadlines of 24 and 72 hours, and board accountability. What to arrange first.
AI Act transparency since 2 August 2026
Chatbots must identify themselves as AI and AI-generated media must be marked. What that means for your website.
Does NIS2 apply to us?
The sector and size criteria, and what to do if it does not apply to you but does to your clients.
ISO 27001 and NIS2
Where they overlap and where they do not. The gaps sit in reporting, the supply chain and board accountability.
Practical choices
Why we advise 5G failover
What an hour without connectivity costs, how automatic failover works, and when it is worth the investment.
Phishing simulations without scaring people
A simulation is not a reckoning. How to measure, report back and keep people reporting.
From Prevent to Protect
The signals that your package no longer fits: growth, client compliance requirements, or too many billed hours.
Frequently asked questions
Are the articles available in English?
The summaries here are. Full articles are published in Dutch; if you would like one in English, ask us and we will send a translation.
How often do you publish?
When there is something worth saying, usually around legislative changes or questions we hear repeatedly.
Can we reuse an article internally?
Yes, with attribution. Ask us if you would like an editable version for your own staff communication.
A question that is not covered here?
Ask us. If the answer is useful to others, it usually becomes the next article.