Kick-off

Kick-off Cybersecurity Act: prepare for the registration and reporting requirements

The Cybersecurity Act (Cbw) introduces registration and reporting obligations for higher education. What does this mean for your institution and what do you need to arrange? During this kick-off meeting, you will find out what is expected of you and what support you will receive from SURFcert as a prospective CSIRT.

Man knielt bij kluisje op de UvA
Studio Paraiso, AmazĂ´nia space, Moreelsehoek 2, Utrecht

The Cyber Security Act imposes new legal obligations on your institution. What exactly do you need to put in place? When does this need to be done? And what can you already do or arrange? You will receive help and advice from the prospective CSIRT (SURFcert).

Registration and reporting obligations

The kick-off will begin with a brief overview of where we stand, the schedule and the activities that are already in place or are still being developed within the SURF framework. The focus will be on two of the three obligations under the Cybersecurity Act: the registration obligation and the reporting obligation. Good to know: the third obligation – the duty of care – will not come into force until 2030 and is currently still being finalised.

During the kick-off, you will receive information on the latest developments, what this means in practice for your institution, and what you can expect from the collaboration with SURFcert. You will also be given practical guidance to help you move forward within your own organisation. The Inspectorate of Education will be present to introduce themselves and to provide an explanation of the obligations and enforcement of the Act.

Who is it for?

This event is intended for professionals at all universities of applied sciences and universities who are preparing for the Cybersecurity Act. This includes CISOs, security officers, CERT members from institutions and other colleagues involved in cybersecurity. It specifically addresses the situation and regulatory framework for (publicly funded) universities of applied sciences and universities. It is therefore less relevant for organisations falling under a different Cbw framework.This event will be held in Dutch.

Programme

The following topics will be covered:

9.30  Reception with coffee and tea
10.00  Welcome
10.05  The Cybersecurity Act: where do we stand, what is the timetable, and which projects and activities are being developed within the SURF framework?
10.30  Further explanation of the registration and reporting obligations
11.00  Break
11.15  SURFcert as prospective CSIRT: who are they and what do they do (apart from what they are currently doing)? What role do they play in relation to the reporting obligation?
11.45  Inspectorate of Education: introduction, involvement in the reporting obligation and explanation of their role as a supervisory body
12.15  Networking lunch
13.00  End

There will, of course, be ample opportunity to ask questions and to meet colleagues from other institutions who are working on this.

Location and directions

The kick-off will take place at Studio Paraiso (Moreelsehoek 2, Utrecht), in the Amazônia space. This is right next to Utrecht Central Station, close to the SURF office. When you walk out of the station concourse towards Hoog Catharijne, turn immediately right once you’re outside on Stationsplein. Less than a minute’s walk away, on the corner, you’ll find Studio Paraiso (on the right, just before the Moreelseburg, the cycle and footbridge over the railway tracks).

Any questions?

Send an email to cbw@surfcert.nl.

Sign up now Kick-off Cybersecurity Act: prepare for the registration and reporting requirements

Studio Paraiso, AmazĂ´nia space, Moreelsehoek 2, Utrecht

Related topics: