Thousands of organisations still not ready for new cybersecurity law as Cybersec Netherlands puts digital resilience centre stage

Government, businesses and experts come together at Royal Dutch Jaarbeurs on 9 and 10 September 2026

Cybersec Netherlands 2025

Utrecht, 1 September 2026 – Shortly before the introduction of the new Dutch Cybersecurity Act, only 4,144 organisations had registered or were listed as affiliated organisations, while an estimated 8,000 to 10,000 organisations fall within the scope of the legislation. This is according to an analysis by Computable, the IT platform of Royal Dutch Jaarbeurs, based on data from the National Cyber Security Centre (NCSC). The findings illustrate how new legislation and growing cyber threats are increasing the need for knowledge sharing and collaboration. These themes will take centre stage at Cybersec Netherlands at Jaarbeurs on 9 and 10 September, where government, businesses, experts and knowledge institutions will come together to strengthen the digital resilience of the Netherlands.*

New cybersecurity law increases the need for knowledge and collaboration

The urgency is clear. Since the Dutch Cybersecurity Act came into force on 15 August, thousands of organisations have been required to comply with new digital security obligations. Yet enquiries by Computable* found that shortly before its introduction, only 4,144 organisations had registered or were listed as affiliated organisations, compared with an estimated 8,000 to 10,000 organisations that fall within the scope of the law.

The legislation reflects a broader development: cybersecurity has evolved from an IT issue into a strategic priority for executive boards and senior management. At the same time, cyber threats are increasing and organisations are becoming increasingly dependent on foreign technology. At Cybersec Netherlands, experts, policymakers and organisations will come together to share knowledge and exchange experiences on these challenges.

From cybersecurity to digital sovereignty

Cybersecurity today is not only about preventing attacks. It is also about how much control organisations actually have over their data, systems and technology. Growing geopolitical tensions and dependence on foreign suppliers are making digital sovereignty a strategic issue for decision-makers.

One of the speakers at the event is Pieter van Oordt, known for his role as a whistleblower in the DigiD case. Speaking in a personal capacity, he will share lessons from the Solvinity case, in which a proposed acquisition involving a Dutch provider of critical government services raised questions about digital autonomy, public interests and national security.

“Digital sovereignty is not about completely avoiding foreign technology. It is about whether organisations retain sufficient control when circumstances change. Can you switch providers if necessary? Do you understand your dependencies? And are responsibilities clearly assigned? Ultimately, this makes digital sovereignty not a technical issue, but a governance issue for executives, supervisory boards and organisations.”

This is precisely why cybersecurity is becoming an integral part of governance, risk management and strategic decision-making.

Cyber threats do not stop at national borders

Cybersec Netherlands will focus not only on legislation and regulation, but also on the growing pressure from cyber threats, the importance of digital autonomy and national security.

Bas Dunnebier, Chief Science & Technology Officer at the AIVD, will lead a session on how collaboration between government, knowledge institutions and businesses can help strengthen the digital resilience of the Netherlands.

“Digital resilience requires a joint effort from government, businesses and knowledge institutions. By sharing knowledge and expertise and actively working together, we can better prepare for threats and strengthen the resilience of the Netherlands.”

The European dimension will also have a prominent place in the programme. Member of the European Parliament Bart Groothuis will discuss digital sovereignty, geopolitical developments and the impact of AI on European cybersecurity.

“Cyber threats do not stop at national borders. As AI further increases the speed and scale of cyberattacks, we also need to strengthen our digital resilience at European level. This requires fewer strategic dependencies, strong cooperation between Member States and a clear direction for the technologies that will shape our digital future.”

Cybersecurity becomes a strategic issue for the Netherlands

With the event, Jaarbeurs reinforces its role as a connector of professionals, industries and major societal challenges. By bringing together experts, policymakers, businesses and knowledge institutions, Jaarbeurs aims to stimulate innovation and growth in critical markets such as cybersecurity.

Jordi van Herk, Cluster Manager IT at Royal Dutch Jaarbeurs:

“Cybersecurity is no longer just an IT issue. It affects business continuity, our public services, national security and the question of how dependent we want to be on foreign technology. That is exactly why we bring together government, businesses, experts and knowledge institutions at Cybersec Netherlands. Not only to share knowledge, but to make the Netherlands more digitally resilient and less dependent.”

Leading speakers make Utrecht the centre of cybersecurity knowledge for two days

Cybersec Netherlands brings together dozens of national and international experts to address today’s most pressing cybersecurity challenges, from cyber threats and digital sovereignty to AI, regulation and national security.

Speakers include former MIVD Director Pieter Cobelens, Martin de Vries of VDL Group, Anne Visser of Security Delta Nederland, Mandy Andress and Minister of Justice and Security David van Weel. Together, they will share their perspectives on the digital resilience of the Netherlands and the role of government, businesses and knowledge institutions in strengthening it.

Taking place alongside Data Expo on 9 and 10 September 2026 at Royal Dutch Jaarbeurs, Cybersec Netherlands forms the largest Dutch knowledge platform at the intersection of cybersecurity, data and artificial intelligence. For two days, Utrecht will become a hub for knowledge sharing, innovation and collaboration, all aimed at building a digitally resilient Netherlands.

*Source: Computable, based on data from the National Cyber Security Centre, August 2026. At that time, 4,144 organisations had registered or were listed as affiliated organisations in the Dutch Cybersecurity Act entity register, compared with an estimated 8,000 to 10,000 organisations that fall within the scope of the legislation.