Jurisdiction
Region
Requirement
Policy
Cyberbeveiligingswet (Cybersecurity Act) — implements NIS2 Directive (EU) 2022/2555, replacing the Wet beveiliging netwerk- en informatiesystemen (Wbni)
Applies to
CSIRTs; by extension, essential/important entities across NIS2 Annex I/II sectors operating in the Netherlands, and any party wishing to report a vulnerability
Provision
Artikel 17, eerste lid, Cyberbeveiligingswet — designation of a CSIRT as national CVD coordinator (mirrors NIS2 Article 12)
Description
Dutch (original): "Bij of krachtens algemene maatregel van bestuur wordt een CSIRT aangewezen als de coördinator met het oog op een gecoördineerde bekendmaking van kwetsbaarheden."
English (translation): "By or pursuant to a general administrative order, a CSIRT shall be designated as the coordinator with a view to the coordinated disclosure of vulnerabilities."
The designated CSIRT coordinator's tasks (Art. 17(2), per secondary summary — not independently re-verified verbatim) include acting as intermediary between reporters and affected manufacturers/providers, identifying and contacting affected entities, and coordinating with counterpart coordinators in other EU Member States.
Date
August 15, 2026
Organization
Dutch Ministry of Justice and Security (Ministerie van Justitie en Veiligheid); National Cyber Security Centre (NCSC-NL)