Insights

Cybersecurity has long since ceased to be an exclusively IT-related topic. Cyber incidents can lead to operational downtime, financial losses, reputational damage and disruption across the entire value chain. That is why the NIS2 Directive places responsibility firmly on directors and management.

For many organisations, the likelihood of this happening seems low. Yet daily news reports show that ransomware attacks, data theft, and disruptions of critical IT systems are no longer rare exceptions. Financial damage can run into millions of euros, while reputational harm and loss of customer trust often have even greater consequences.

On 19 November 2025, the European Commission presented the “Digital Package on Simplification”. In this article, we break down what the Digital Omnibus package is, why it has been proposed, and who it will affect.

The cyber resilience of Dutch businesses is under pressure. The most recent figures from the International Business Report (IBR) show that the number of significant cyber incidents in SMEs and the mid-market is rising sharply.