The accessible language of the NIS2 quality mark according to cybersecurity editor Jan Meijroos

The digital world is constantly evolving, and with this change comes new challenges for businesses, especially when it comes to cybersecurity. For many SMEs and small businesses, cybersecurity is often an abstract concept that is difficult to grasp. Everyone understands the need to keep their house or car securely locked, but backing up data and encrypting backups… that’s not something everyone immediately recognises. As a journalist who writes extensively about cybersecurity and technology, I’ve noticed that many companies find cybersecurity and information security challenging. They understand the urgency but are often overwhelmed by the jargon. However, everyone will need to step up their game in the coming period.

Securing the entire supply chain

With the new European cyber law, NIS2, on the horizon, significant changes are coming for all companies in the Netherlands. Organisations that are crucial to society, the so-called NIS2 companies, will have to make extra efforts to protect their digital networks and systems from problems such as disruption or extortion. This also means working with their direct suppliers to secure the entire supply chain. This is where the NIS2 Quality Mark comes in, a certification specifically designed for the latter group.

The NIS2 Quality Mark is a ray of hope for many entrepreneurs who are suppliers to large and important companies. These smaller companies are often overwhelmed by complex regulations that require them to implement heavy, often incomprehensible measures. The result? Resistance to change. But this certification takes a different approach.

Understandable task, three levels

What makes the NIS2 Quality Mark so accessible is the plain language in which it is written. No complicated jargon, just clear, applicable guidelines. This allows entrepreneurs to know exactly what is expected of them without feeling overwhelmed.

In addition, the certification is divided into three levels: QM10, QM20 and QM30. These levels are tailored to the importance and size of the organisation, making it much easier to achieve certification. There’s no need to implement unnecessarily heavy measures; the lists are clear and straightforward, lowering the threshold to get started.

And that is crucial, because retaining large customers is vital for many small businesses. With the NIS2 Quality Mark, they can demonstrate that they have the necessary cyber security measures in place, building trust with their larger clients and keeping them ahead in a competitive market.

Retain valuable customers

In summary, the NIS2 Quality Mark provides an accessible, understandable and effective way for SMEs to get their cybersecurity house in order. Not only to comply with regulations, but also to retain their valuable customers and strengthen their position in the marketplace.