Two ICT service providers have become the first to be certified for the Keurmerk Digitale Basisveiligheid MKB. Launched in 2025, the quality mark supports SMEs in choosing an ICT service provider to improve their digital basic security.
The quality mark assesses whether service providers implement the security measures from the Risicoklassenindeling Digitale Veiligheid (RKIDV) correctly and professionally. The RKIDV is a tool developed by the Nationaal Cyber Security Centrum (NCSC). Based on nine questions, the tool determines a company’s risk class and the associated security measures. The classification is based on the five basic principles of digital resilience of the NCSC.
The Centrum voor Criminaliteitspreventie en Veiligheid (CCV) developed the quality mark following a motion in the Tweede Kamer to support SMEs in improving their digital basic security. An independent certification body assesses whether a service provider meets the requirements of the quality mark and correctly implements the measures from the RKIDV.
The CCV emphasises that an ISO 27001 certificate is not the same as the quality mark. According to the report, ISO 27001 mainly says something about how an ICT service provider has organised the information security of its own organisation. The quality mark focuses on the quality of the services provided to customers and on the implementation of security measures for those customers.
