Webinar Cybersecurity Act and SURFcert

Cyber security law and notification requirement

The Cyber Security Act is the Dutch translation of the European NIS2 directive. The minister of Education announced in April 2025 that the hbo and wo will be covered by the law. The bill stipulates that institutions covered by the law must receive assistance from the sectoral CSIRT (Computer Security Incident Response Team). They must also report significant security incidents there: the duty to report. SURFcert, as the intended designated sectoral CSIRT, will fulfil that role for education and research.

For whom

This webinar is intended for those involved in information security and cybersecurity in education and research who will (potentially) be affected by the Cybersecurity Act.

Programme

During the webinar:

• We will explain what will change in SURFcert's services, and what will not.
• You will hear whether it matters whether or not your institution is designated under the Cybersecurity Act.
• We will explain the notification requirement in more detail (as far as is known at that time).
• You will know what steps you can already take to prepare for the notification requirement.

Of course, there will also be plenty of room for questions.

After registration

Two hours before the start, you will receive an email reminder with a link to the Teams environment. The webinar will not be recorded.