You may well have heard about it: the Cyberbeveiligingswet (Law on cyber security) will come into immediate effect in August 2026. About 8,000 companies shall have to comply with strict rules as regards security of their network and information systems. We at Quatronic are well prepared and that is not a hollow promise. Our ISO 27001 certificate is tangible proof that we meet the standards required ― both for ourselves as well as our clients. After all, the latter must be able to trust us to handle our information diligently, to minimise risks and to know how to act in case of incidents. The Cyberbeveiligingswet will soon force you to scrutinise thoroughly all of your partners and suppliers. Quatronic’s ISO 27001-status saves much time and effort therein. Read how and why in this blog.
Security of (digital) data and information is more important than it has ever been. Newspapers and television abound with news on hack attacks, data leaks and scamming practices. It is hardly in vain that thousands of enterprises in critical sectors are soon to observe the Cyberbeveiligingswet, which is based on the European NIS2-guideline. It imposes due diligence and a duty of care upon them in the context of data safety. This includes but is not limited to risk assessment, an obligation to report incidents and training of employees.
Furthermore, companies are to corroborate that not only they themselves have taken care of this, but that the same also applies to their entire supply chain. In the relevant sectors in particular (such as infrastructure, energy, finance and ICT), which involve many interacting parties and handle sensitive data, this is not an altogether trivial task.
As such, the new law comes with quite some additional work to be performed. Those working with Quatronic, however, know that cyber security is our top priority.
How do clients benefit?
As of March 2026, we can proudly declare that we are in possession of the ISO 27001 certification. It is recognised internationally and bears concrete witness to the fact that we meet the requirements set by the Cyberbeveiligingswet. A client has to be able to verify that Quatronic observes them, which is precisely what our ISO 27001 certificate effects. It shortens the inquiry process significantly, so that the audit takes but moments.
Indeed, our partners and clients are able to bypass time-consuming assessment forms and swiftly to fill out data-processing agreements. Instead of commencing an inspection that might take weeks, they may simply request our certificate and supply it as proof.
Incidentally, the forthcoming law is not merely the so-manieth layer of bureaucracy. Handling data without sufficient care may well lead to profound consequences come incidents, which always remain a possibility. Companies stricken by hacks suffer serious damage to their reputation, not to mention the financial and legal repercussions. Therefore, our clients are assured that we know exactly what to do should something go awry.
ISO 27001 as international guideline
The International Organisation for Standaardisation (ISO) is a worldwide consortium determining quality-guaranteeing requirements for a lengthy list of subjects. These cover a variety of domains: from the twisting direction in yarns during textile production (number 2) and making tea (3,103) to cosmetics labelling (22,715). Number 27,001 in the list concerns information security.
This certification is the result of a long and intensive trajectory. We have, inter alia, produced clear protocols for data management, particularly pertaining to customers’ data. We have plainly determined which data are stored where and who is allowed to view them. These rights and procedures are stored centrally and kept up-to-date. Our employees have followed trainings to practise them. Moreover, we scrutinise our own partners and used services ― is their information management also in good order? Should an incident occur, we contain the damage as much as possible and immediately notify the parties involved, as the law proscribes.
After all of these preparations, Quatronic has been audited extensively by an independent bureau that then granted us the certificate. This does not mean we have nothing left to do, though. The certified status must be maintained actively. New audits take place annually, scrupulously monitoring that we not only maintain the standards but our compliance therewith.
To us as enterprise, the certificate also forms an important milestone on the way towards growth. Armed with these standards, we can expand in the knowledge that all of our colleagues Quatronic’s and our clients’ data safety at the top of their lists.
Are you curious as to our ISO 27001-arrangements? Give us a ring!
Get in touch with
Viktor
