Information Security
Our members decide on which themes we are active. We are working on a safe, reliable digital business and society.
Information Security - page 5
With digital technology now penetrating into the core of our businesses, production processes and public institutions, it becomes increasingly important that the technology is secure and trustworthy and complies with legal and ethical standards. More security is necessary, especially since the technology is highly complex, changes quickly and its risks are at the expense of the user. That is why confidence in technological expertise, compliance with agreements, standards and laws, and the focus on your interest of the supplier or implementation partner, is good but not always sufficient.
It is time for a next step towards:
- Ensuring compliance of digital technology with laws and regulation (i.a. GDPR) and providing assurance that products/services/processes do what they are suppose to (and nothing more). We will aim for more standardisation and certification, both in the Netherlands via initiatives at he Centre for Crime Prevention and Safety and the Online Trust Coalition, and in Europe via the European Commission.
- Sharing information about cyber vulnerabilities and incidents between government and businesses, and among businesses. Some important steps have been taken towards a ‘National covered system’, but there is more to be done. Securely sharing information between NCSC, DTC and other certs, and with cybersecurity partnerships, has to improve soon. Information that can help businesses guard themselves against concrete forms of ill intentions and damage cannot only reside at the government. Additionally, business should have the possibility to share information about incidents and threats that they experience themselves with others, so that they can be better prepared.
- Besides secure products and services, and information about current threats and vulnerabilities, it is also vital to practice how to act during an incident, including a situation in which some employees are working from home and others from the office. Therefore, we will once again draw attention to our exercise scenario and update it where necessary.
The new digital world offers many opportunities. This also increases dependence and vulnerability. By working together and sharing information and knowledge, we are all getting better and safer and we are creating new opportunities for these threats. We are working on this, both within the CIO Platform Nederland, and with the government and other parties outside.
-
December 7, 2020
Launch cybersecurity guide – cooperation pays off!
The ‘Guide for cybersecurity initiatives’ where large organisations, SMEs and self-employed can turn to for help to elevate their digital resilience has been launched! After an intensive cooperation between the Digital Trust Centre and members of the CIO Platform Nederland. ‘We encourage that various initiatives in the field of cybersecurity are increasingly easier to find due to this new guide. Hopefully, it will elevate the security of Dutch corporations’, said Henk van Steeg, CIO Thales Nederland and member of the CIO Committee Information Security.
-
August 27, 2020
CIO Platform Nederland in FD Article 'National Cyber Watchdog does not bark for everyone'
Yesterday, 26 August, Het Financieele Dagblad again paid attention to digital resilience: the need to also inform the non-vital sector in the event of critical security leaks. On behalf of CIO Platform Nederland, members Marcel Krom (CIO PostNL) and Paul Samwel (CISO ONVZ) and director Ronald Verbeek were interviewed.
-
August 18, 2020
Digital resilience affected by NCSC withholding information
In response to the article in the Financieele Dagblad of last August 17th with the title "The government knew who was vulnerable, but still allowed companies to be hacked. The government throws away information about hacks from companies", CIO Platform Nederland is calling on the government today to never let this happen again. And to take up its role for the digital resilience of Dutch society.
-
July 10, 2020
Jointly analysing cyber security information without sharing
On July 7th, 2020, at a webinar organized for members of CIO Platform Nederland, TNO introdced an ongoing research project in the field of the exchange of cyber security information and Secure Multi-Party Computation (MPC). In this blog post, we'll make the information from the webinar more widely available, as MPC and cyber security can be an interesting and valuable combination for anyone who is working on cyber security (threat) information.
Information Security events
There are no meetings published at the moment. Please check back later!