{"id":7201,"date":"2026-01-01T22:57:59","date_gmt":"2026-01-01T21:57:59","guid":{"rendered":"https:\/\/riskstudio.com\/blog\/municipal-digital-security-agenda-the-emphasis-is-shifting-to-external-dependencies\/"},"modified":"2026-02-05T14:03:48","modified_gmt":"2026-02-05T13:03:48","slug":"municipal-digital-security-agenda-the-emphasis-is-shifting-to-external-dependencies","status":"publish","type":"post","link":"https:\/\/riskstudio.com\/en\/blog\/municipal-digital-security-agenda-the-emphasis-is-shifting-to-external-dependencies\/","title":{"rendered":"Municipal Digital Security Agenda: the emphasis is shifting to external dependencies"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">The Digital Security Agenda 2028 emphasizes that municipalities must not only protect their own systems, but also the resilience of their suppliers and partners. With RiskStudio, municipalities can identify and continuously monitor high-risk companies per theme, such as digital disruption or getting their own house in order. <\/p>\n\n<h2 class=\"wp-block-heading\" id=\"Agenda-Digitale-Veiligheid-2028\">Digital Security Agenda 2028<\/h2>\n\n<p class=\"wp-block-paragraph\">Improving the digital security of municipal services and the digital resilience of residents and entrepreneurs. That is the goal of the Digital Security Agenda 2028. <\/p>\n\n<p class=\"wp-block-paragraph\">With the <a href=\"https:\/\/vng.nl\/media\/57747\"><u>Digital Security Agenda 2028: &#8216;Digital security is the (behavioral) norm in our municipalities&#8217; (pdf, 130 kB)<\/u><\/a>, the VNG (Association of Netherlands Municipalities) makes clear what is needed to help municipalities move towards a future-proof digital society.<\/p>\n\n<h2 class=\"wp-block-heading\" id=\"Belangrijke-thema&#x2019;s\">Important themes<\/h2>\n\n<p class=\"wp-block-paragraph\">To address the challenges in the field of digital security, the VNG, together with municipalities, will continue to work on three main themes in the coming years:<\/p>\n\n<ul class=\"wp-block-list\">\n<li><strong>Preparation for digital disruption<\/strong><\/li>\n\n\n\n<li><strong>Resilient residents and entrepreneurs<\/strong><\/li>\n\n\n\n<li><strong>Getting our own house in order: robust information security<\/strong><\/li>\n<\/ul>\n\n<p class=\"wp-block-paragraph\">These main themes encompass various pillars, including:<\/p>\n\n<ul class=\"wp-block-list\">\n<li>Preparation for European and national laws and regulations (such as NIS2 and BIO)<\/li>\n\n\n\n<li>Leadership and professionalization of digital security at the local government level<\/li>\n\n\n\n<li>Coping with labor market shortages<\/li>\n<\/ul>\n\n<p class=\"wp-block-paragraph\">This agenda marks an important step towards structural digital security. Municipalities are called upon to actively contribute, so that residents and entrepreneurs can count on reliable and secure digital services. <\/p>\n\n<h2 class=\"wp-block-heading\" id=\"De-groeiende-afhankelijkheid-van-externe-partijen\">The growing dependence on external parties<\/h2>\n\n<p class=\"wp-block-paragraph\">Digital security within municipalities is increasingly determined by external factors. Every organization is part of a broader chain of suppliers, partners and social institutions. Within the three main themes of the Digital Security Agenda, this dependency becomes visible in various ways:  <\/p>\n\n<h4 class=\"wp-block-heading\" id=\"1.-Voorbereiding-op-digitale-ontwrichting\">1. Preparation for digital disruption<\/h4>\n\n<p class=\"wp-block-paragraph\">This theme is about the continuity of vital processes and services. Municipalities are dependent on numerous external parties: <\/p>\n\n<ul class=\"wp-block-list\">\n<li>Energy and utility facilities that are essential for the physical and digital infrastructure.<\/li>\n\n\n\n<li>Communication and IT suppliers that ensure accessibility, data traffic and information provision.<\/li>\n\n\n\n<li>Emergency services and social chains, such as healthcare, benefits and civil affairs, where cooperation is crucial for social stability.<\/li>\n<\/ul>\n\n<p class=\"wp-block-paragraph\">A disruption at one of these parties can lead to serious disruption. It is therefore essential to identify and monitor these external risks. <\/p>\n\n<h4 class=\"wp-block-heading\" id=\"2.-Weerbare-inwoners-en-ondernemers\">2. Resilient residents and entrepreneurs<\/h4>\n\n<p class=\"wp-block-paragraph\">Municipalities are increasingly setting up partnerships to help residents and local businesses become digitally resilient. Consider regional cyber alliances, information campaigns or initiatives with local educational institutions.<br\/>External organizations also play an important role here: partners that offer training, companies that manage local infrastructures or platforms that share information. Municipalities must be able to rely on the digital security of these collaborations.  <\/p>\n\n<h4 class=\"wp-block-heading\" id=\"3.-Eigen-huis-op-orde\">3. Getting our own house in order<\/h4>\n\n<p class=\"wp-block-paragraph\">The third theme touches on the internal digital resilience of the municipality itself. But here too, the following applies: virtually all municipal processes rely on suppliers and service providers. Consider:  <\/p>\n\n<ul class=\"wp-block-list\">\n<li>Software suppliers for civil affairs, taxes or social domain<\/li>\n\n\n\n<li>Hosting and cloud providers<\/li>\n\n\n\n<li>IT managers and security service providers<\/li>\n\n\n\n<li>External advice and support parties<\/li>\n<\/ul>\n\n<p class=\"wp-block-paragraph\">This chain of suppliers forms the digital backbone of the municipal organization. Insight into their safety is essential for their own resilience. <\/p>\n\n<h2 class=\"wp-block-heading\" id=\"Hoe-RiskStudio-gemeenten-helpt-om-grip-te-krijgen-op-hun-agenda\">How RiskStudio helps municipalities gain control of their agenda<\/h2>\n\n<p class=\"wp-block-paragraph\">RiskStudio offers municipalities a smart way to monitor and manage their external dependencies, without complicated questionnaires or lengthy processes.<\/p>\n\n<p class=\"wp-block-paragraph\">An important strength of RiskStudio is that municipalities can translate the three main themes of the Digital Security Agenda 2028: digital disruption, resilient residents and entrepreneurs, and getting their own house in order, into crown jewels within their own organization.<\/p>\n\n<div class=\"gb-element-2b555e66\">\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"464\" src=\"https:\/\/riskstudio.com\/wp-content\/uploads\/2026\/01\/RiskStudio_screenshot_crownjewels-1024x464.webp\" alt=\"\" class=\"wp-image-3585\" srcset=\"https:\/\/riskstudio.com\/wp-content\/uploads\/2026\/01\/RiskStudio_screenshot_crownjewels-1024x464.webp 1024w, https:\/\/riskstudio.com\/wp-content\/uploads\/2026\/01\/RiskStudio_screenshot_crownjewels-300x136.webp 300w, https:\/\/riskstudio.com\/wp-content\/uploads\/2026\/01\/RiskStudio_screenshot_crownjewels-768x348.webp 768w, https:\/\/riskstudio.com\/wp-content\/uploads\/2026\/01\/RiskStudio_screenshot_crownjewels-1320x598.webp 1320w, https:\/\/riskstudio.com\/wp-content\/uploads\/2026\/01\/RiskStudio_screenshot_crownjewels.webp 1485w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n<\/div>\n\n<h3 class=\"wp-block-heading\" id=\"Thema&#x2019;s-als-kroonjuwelen\">Themes as crown jewels<\/h3>\n\n<p class=\"wp-block-paragraph\">Municipalities can designate each theme as a digital crown jewel, a crucial area of attention in which continuity and security are central. For example: <\/p>\n\n<ul class=\"wp-block-list\">\n<li><strong>Digital disruption:<\/strong> social continuity, energy supply, communication and emergency services.<\/li>\n\n\n\n<li><strong>Resilient residents and entrepreneurs:<\/strong> collaborations with regional partners, local initiatives or educational institutions.<\/li>\n\n\n\n<li><strong>Getting our own house in order:<\/strong> internal services and suppliers that contribute to daily municipal processes.<\/li>\n<\/ul>\n\n<h3 class=\"wp-block-heading\" id=\"Risico&#x2019;s-en-relaties-in-kaart\">Mapping risks and relationships<\/h3>\n\n<p class=\"wp-block-paragraph\">Within each crown jewel, municipalities can then define sub-themes, such as specific processes, systems or partnerships. They link the companies and suppliers that play a role in the implementation or support of these sub-themes. <\/p>\n\n<p class=\"wp-block-paragraph\">RiskStudio makes it possible to:<\/p>\n\n<ul class=\"wp-block-list\">\n<li><strong>Visually structure dependencies<\/strong> per theme or service.<\/li>\n\n\n\n<li><strong>Automatically identify high-risk companies<\/strong>, for example when a data leak, ransomware incident or sanction is detected.<\/li>\n\n\n\n<li><strong>Assign responsibilities<\/strong> to internal employees or departments, so that it is clear who is supervising which parts of the chain.<\/li>\n<\/ul>\n\n<div class=\"gb-element-99b9d9d3\"><div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"580\" height=\"431\" src=\"https:\/\/riskstudio.com\/wp-content\/uploads\/2026\/01\/RiskStudio_screenshot_cyberincidents.webp\" alt=\"\" class=\"wp-image-3584\" srcset=\"https:\/\/riskstudio.com\/wp-content\/uploads\/2026\/01\/RiskStudio_screenshot_cyberincidents.webp 580w, https:\/\/riskstudio.com\/wp-content\/uploads\/2026\/01\/RiskStudio_screenshot_cyberincidents-300x223.webp 300w\" sizes=\"auto, (max-width: 580px) 100vw, 580px\" \/><\/figure>\n<\/div><\/div>\n\n<h3 class=\"wp-block-heading\" id=\"Compliance-en-overzicht\">Compliance and overview<\/h3>\n\n<p class=\"wp-block-paragraph\">Thanks to this thematic approach, RiskStudio seamlessly aligns with the requirements of the BIO, NIS2 and the broader Digital Security Agenda. Municipalities can demonstrably show: <\/p>\n\n<ul class=\"wp-block-list\">\n<li>Where their largest digital dependencies lie.<\/li>\n\n\n\n<li>Which suppliers or partners pose risks.<\/li>\n\n\n\n<li>Which control measures or improvement actions are planned.<\/li>\n<\/ul>\n\n<p class=\"wp-block-paragraph\">In this way, RiskStudio helps municipalities not only to monitor incidents, but to structurally organize their digital security around the themes that really matter.<\/p>\n\n<h2 class=\"wp-block-heading\" id=\"Conclusie\">Conclusion<\/h2>\n\n<p class=\"wp-block-paragraph\">The Digital Security Agenda 2028 rightly emphasizes that digital security extends beyond the walls of the town hall. The actual resilience of a municipality depends on its partners, suppliers and collaborations. <\/p>\n\n<p class=\"wp-block-paragraph\"><strong>RiskStudio<\/strong> makes it possible to make that chain visible and manageable \u2014 automated, up-to-date and transparent. In this way, municipalities can confidently work towards a safe digital future for residents and entrepreneurs. <\/p>\n\n<div>\n<h2 class=\"wp-block-heading\">Frequently Asked Questions<\/h2>\n\n\n\n<div class=\"gb-accordion\">\n<div class=\"gb-accordion__item gbp-card--border gb-accordion__item-1c8f2e0c\">\n<div role=\"button\" tabindex=\"0\" class=\"gb-accordion__toggle gb-accordion__toggle-320b7f12\" id=\"gb-accordion-toggle-320b7f12\">\n<h3 class=\"gb-text gbp-card__title gb-text-0a2b8552\"><strong><strong>What is the Digital Security Agenda 2028?<\/strong><\/strong><\/h3>\n\n\n\n<span class=\"gb-accordion__toggle-icon gb-accordion__toggle-icon-2341f8c0\"><span class=\"gb-accordion__toggle-icon-open\"><svg aria-hidden=\"true\" viewbox=\"0 0 256 256\"><rect width=\"256\" height=\"256\" fill=\"none\"\/><polyline points=\"208 96 128 176 48 96\" fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"16\"><\/polyline><\/svg><\/span><span class=\"gb-accordion__toggle-icon-close\"><svg aria-hidden=\"true\" viewbox=\"0 0 256 256\"><rect width=\"256\" height=\"256\" fill=\"none\"\/><polyline points=\"48 160 128 80 208 160\" fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"16\"><\/polyline><\/svg><\/span><\/span>\n<\/div>\n\n\n\n<div class=\"gb-accordion__content\" id=\"gb-accordion-content-7567b8ef\">\n<div class=\"gb-element-95df019c\">\n<p class=\"gb-text\">A multi-year program of the VNG that supports municipalities in strengthening their digital security and resilience, with an emphasis on cooperation and continuity.<\/p>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n<div class=\"gb-accordion__item gbp-card--border gb-accordion__item-d003b8b7\">\n<div role=\"button\" tabindex=\"0\" class=\"gb-accordion__toggle gb-accordion__toggle-53a8d921\" id=\"gb-accordion-toggle-53a8d921\">\n<h3 class=\"gb-text gbp-card__title gb-text-c94e68d1\"><strong><strong>What does \u2018preparation for digital disruption\u2019 mean in concrete terms?<\/strong><\/strong><\/h3>\n\n\n\n<span class=\"gb-accordion__toggle-icon gb-accordion__toggle-icon-aff9c8e5\"><span class=\"gb-accordion__toggle-icon-open\"><svg aria-hidden=\"true\" viewbox=\"0 0 256 256\"><rect width=\"256\" height=\"256\" fill=\"none\"\/><polyline points=\"208 96 128 176 48 96\" fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"16\"><\/polyline><\/svg><\/span><span class=\"gb-accordion__toggle-icon-close\"><svg aria-hidden=\"true\" viewbox=\"0 0 256 256\"><rect width=\"256\" height=\"256\" fill=\"none\"\/><polyline points=\"48 160 128 80 208 160\" fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"16\"><\/polyline><\/svg><\/span><\/span>\n<\/div>\n\n\n\n<div class=\"gb-accordion__content\" id=\"gb-accordion-content-4b3a1690\">\n<div class=\"gb-element-ce8cabe8\">\n<p class=\"gb-text\">It concerns the preparation for disruptions in vital processes, such as energy, communication and social services.<\/p>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n<div class=\"gb-accordion__item gbp-card--border gb-accordion__item-7bb35a91\">\n<div role=\"button\" tabindex=\"0\" class=\"gb-accordion__toggle gb-accordion__toggle-5e0ef89d\" id=\"gb-accordion-toggle-5e0ef89d\">\n<h3 class=\"gb-text gbp-card__title gb-text-f66e9781\"><strong><strong>Why should municipalities also monitor external parties?<\/strong><\/strong><\/h3>\n\n\n\n<span class=\"gb-accordion__toggle-icon gb-accordion__toggle-icon-95ed8eb8\"><span class=\"gb-accordion__toggle-icon-open\"><svg aria-hidden=\"true\" viewbox=\"0 0 256 256\"><rect width=\"256\" height=\"256\" fill=\"none\"\/><polyline points=\"208 96 128 176 48 96\" fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"16\"><\/polyline><\/svg><\/span><span class=\"gb-accordion__toggle-icon-close\"><svg aria-hidden=\"true\" viewbox=\"0 0 256 256\"><rect width=\"256\" height=\"256\" fill=\"none\"\/><polyline points=\"48 160 128 80 208 160\" fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"16\"><\/polyline><\/svg><\/span><\/span>\n<\/div>\n\n\n\n<div class=\"gb-accordion__content\" id=\"gb-accordion-content-000d9307\">\n<div class=\"gb-element-bcf45223\">\n<p class=\"gb-text\">Because incidents at suppliers or partners can have direct consequences for municipal services and the privacy of citizens.<\/p>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n<div class=\"gb-accordion__item gbp-card--border gb-accordion__item-c0f8d287\">\n<div role=\"button\" tabindex=\"0\" class=\"gb-accordion__toggle gb-accordion__toggle-ae9e5af0\" id=\"gb-accordion-toggle-ae9e5af0\">\n<h3 class=\"gb-text gbp-card__title gb-text-d5948784\"><strong><strong>How does RiskStudio help with this?<\/strong><\/strong><\/h3>\n\n\n\n<span class=\"gb-accordion__toggle-icon gb-accordion__toggle-icon-a863343e\"><span class=\"gb-accordion__toggle-icon-open\"><svg aria-hidden=\"true\" viewbox=\"0 0 256 256\"><rect width=\"256\" height=\"256\" fill=\"none\"\/><polyline points=\"208 96 128 176 48 96\" fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"16\"><\/polyline><\/svg><\/span><span class=\"gb-accordion__toggle-icon-close\"><svg aria-hidden=\"true\" viewbox=\"0 0 256 256\"><rect width=\"256\" height=\"256\" fill=\"none\"\/><polyline points=\"48 160 128 80 208 160\" fill=\"none\" stroke=\"currentColor\" stroke-linecap=\"round\" stroke-linejoin=\"round\" stroke-width=\"16\"><\/polyline><\/svg><\/span><\/span>\n<\/div>\n\n\n\n<div class=\"gb-accordion__content\" id=\"gb-accordion-content-47b11912\">\n<div class=\"gb-element-6885814c\">\n<p class=\"gb-text\">RiskStudio offers automated monitoring of suppliers and partners, allowing municipalities to identify risks more quickly and meet BIO and NIS2 requirements.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The Digital Security Agenda 2028 emphasizes that municipalities must not only protect their own systems, but also the resilience of their suppliers and partners. With &#8230; <a title=\"Municipal Digital Security Agenda: the emphasis is shifting to external dependencies\" class=\"read-more\" href=\"https:\/\/riskstudio.com\/en\/blog\/municipal-digital-security-agenda-the-emphasis-is-shifting-to-external-dependencies\/\" aria-label=\"Read more about Municipal Digital Security Agenda: the emphasis is shifting to external dependencies\">Read more<\/a><\/p>\n","protected":false},"author":2,"featured_media":7202,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[29],"class_list":["post-7201","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-usecase","tag-municipality","resize-featured-image"],"_links":{"self":[{"href":"https:\/\/riskstudio.com\/en\/wp-json\/wp\/v2\/posts\/7201","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/riskstudio.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/riskstudio.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/riskstudio.com\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/riskstudio.com\/en\/wp-json\/wp\/v2\/comments?post=7201"}],"version-history":[{"count":1,"href":"https:\/\/riskstudio.com\/en\/wp-json\/wp\/v2\/posts\/7201\/revisions"}],"predecessor-version":[{"id":7203,"href":"https:\/\/riskstudio.com\/en\/wp-json\/wp\/v2\/posts\/7201\/revisions\/7203"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/riskstudio.com\/en\/wp-json\/wp\/v2\/media\/7202"}],"wp:attachment":[{"href":"https:\/\/riskstudio.com\/en\/wp-json\/wp\/v2\/media?parent=7201"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/riskstudio.com\/en\/wp-json\/wp\/v2\/categories?post=7201"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/riskstudio.com\/en\/wp-json\/wp\/v2\/tags?post=7201"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}