On January 24, Tom Meurs obtained his PhD at the University of Twente on the subject of "Double-extortion ransomware: a study of cybercriminal profit effort and risk". The research provides a unique insight into Dutch ransomware attacks.

Developments in the USA can also be expected in the Netherlands in a few years. This has been true for technology for some time, but it also applies to laws and regulations. What are the developments in the US, and what can we learn from them?

We are not at war, but there is certainly no peace. The security situation has deteriorated significantly in recent years. The Netherlands is the target of hybrid attacks: cyber operations, espionage and sabotage. In order to respond and recover from attacks, physical, cyber and mental resilience are necessary.

The World Economic Forum and Oxford University conclude that in recent years, the focus has moved from cyber security to cyber resilience. Cyber resilience is of strategic importance and should be high on the board agenda.

The NCTV (National Coordinator for Counterterrorism and Security) has released the Cyber Security Image Netherlands 2024, under the title: “Turbulent times, unforeseen effects”

CEOs are still not involved enough in NIS2. Directors need to get to work to gain the right knowledge and skills about NIS2 and cyber security.

The Cyberbeveiligingswet is expected to come into force in Q3 2025. The Netherlands is thus significantly behind the EU deadline (October 17, 2024).