Ensure a clear action plan when a major cyber or IT issue occurs. Develop that strategy with users connected to the Netherlands Armed Forces Integrated Network (Nafin). This is one of the recommendations from consultancy firm Strict and the Institute for Safety and Crisis Management (COT). Both evaluated the large-scale Nafin disruption of August 27, 2024.

This led to disruptions for, among others, the Royal Military Constabulary, Coast Guard, Eindhoven Airport, and its own defense network. The military organization was not adequately prepared to handle the disruption.

COT and Strict further advise that no distinction should be made between IT and cybersecurity incidents in handling. Some other recommendations: conduct emergency drills and improve crisis communication plans.

Based on the recommendations, Defence is taking measures to be better prepared for a potential new disruption. State Secretary Gijs Tuinman informed the House today.

At the end of last year, Defence announced steps to physically secure Nafin better. This was in response to a report from the Court of Audit.

Nafin is an important fiber optic network for maintaining national security. All ministries are connected to it. But also, for example, the police and emergency call centers of emergency number 112. Nafin is separate from the internet and public fiber optic networks.