Securing Cyber Security is something every organisation has to deal with.
In today's digital age, it is important for all companies, regardless of size, to address the interconnectedness of digital processes
The sector organisation VOTOB has initiated the Digital Resilience programme, within which information is shared about having Cyber Security in order. In this article, Willem Henk Streekstra, the director of VOTOB, shares his insights into the importance of digital resilience and the opportunities that lie ahead for businesses.
Digital security is a theme that recurs with increasing frequency. For many large companies, this is something self-evident; they have the resources and means to set up a good cyber security policy. Willem Henk Streekstra: "However, it is also important for smaller companies to be and remain aware of their own options in the field of cyber security. VOTOB therefore works with businesses to see how their organisation is doing in terms of cyber security. We do this by asking questions such as "how is your online security structured?"And we sketch out a picture of the current opportunities that the organisation can act on.
According to Streekstra, it is not surprising that large companies are better off when it comes to cyber security. Companies with a parent company or head office can look at online security at a higher level and make policy on it. There are often more resources and IT teams available to set up good resources. Smaller companies have more difficulty with this. Fortunately, the National Cyber Security Centre (NCSC) offers information to help companies strengthen resilience. The NCSC has established levels when communicating information about new insights and in the event of a threat, so that companies know where they stand.
"The level of Dutch industry needs to be raised on the cyber front," says Streekstra. He therefore advises companies to ask for support from the government (NCSC) and agencies such as FERM. "Invest in your organisation to protect yourself properly and use the help that is offered." FERM is part of the Port Cyber Resilience Programme. The aim of this programme is to stimulate cooperation between companies in the Port of Rotterdam and raise awareness of cyber risks in order to become the best digitally secure port in the world. Together with FERM, VOTOB works on current issues that are relevant to its members, such as combating spoofing.
Streekstra shares that there will soon be a new NIS directive for determining essential services. "More companies will be designated as essential services. This will have an impact on companies that have not previously been designated as essential and will require investment from companies with this designation. Think of the need for organisational obligations, such as an annual review and an obligation to report (cyber) incidents. The government is making assistance available to meet the new obligations."
There is, however, according to him, still a point of concern: "Essential services are currently identified per company location, whereas it would be better to identify them at chain level. An essential service can still be adversely affected in the current working method if another party in the chain has not been designated as essential and has taken insufficient measures to prevent digital disruption. If my business depends on raw materials that I get from the neighbours and then they break down: then I can't continue either." Streekstra therefore also calls for the designation of essential services to be established at chain level.
Finally, Streekstra has a point for attention to pass on to companies: "Thinkabout the resilience of your organisation after a cyber attack. How can you get back to work as soon as possible? The answer to this question may mean that, as an organisation, you also remain accessible in analogue form, locally. Not everything has to depend entirely on digital control."
For more information on cyber security, Safety Delta Netherlands has put together a knowledge collection " Industrial Cyber Security"that gives you a broader insight into the knowledge that is available on this theme.
19 April 2022
