Skip to content
The number one comparison site for certification in the Netherlands

NCSC remains CSIRT for municipalities under the Cybersecurity Act

The NCSC will continue to support municipalities as a CSIRT; municipalities must register and report significant incidents under the Cybersecurity Act.

20 October 2026

The National Cyber Security Centre (NCSC) will remain the sectoral Computer Security Incident Response Team (CSIRT) for municipalities and joint arrangements. The service, which has been provided since the Cybersecurity Act (Cbw) came into force this summer, will continue.

Under the Cbw, municipalities and joint arrangements must, among other things, register and report significant incidents. This can be done via MijnNCSC. Following registration, onboarding takes place and the organisations can use the NCSC’s CSIRT services.

Many organisations have already registered and completed the onboarding process. Organisations that have not yet done so are expressly urged to take action.

The Information Security Service (IBD), which operated as a Computer Emergency Response Team (CERT) under the Wbni, has now been designated as a liaison organisation under the Cbw. An investigation is under way into which services the IBD can provide in addition to the NCSC’s statutory duties.

Further reading

All news