First Dutch software company certified under new European data security standard

Today, Marco Bijl, director at DigiTrust and lead auditor, officially presented the NIS2 Quality Mark certificate to Juri van Tuijl of Spatial Insight.
NIS2 is the new standard that EU Member States must implement to strengthen society’s resilience against digital threats. In the Netherlands, the certificates are issued by the Quality Innovation Foundation (Stichting Kwaliteits Innovatie).

From left to right: Peter Noordhoek, Juri van Tuijl, Ireen Schmitz, Marco Bijl and Ignaz Worm

Dr. Peter Noordhoek, Director of the NIS2 Quality Mark:
“We are delighted that Spatial Insight has achieved its NIS2 QM10 Quality Mark certification—and as the first software company to do so! We launched this initiative because it is essential that even smaller companies supplying NIS2 entities have their basic cybersecurity in order. This company has taken a significant step forward. The approach they followed is an inspiration to the entire initiative.”

Spatial Insight provides software and data science consultancy services to drinking water companies, municipalities, and grid operators.

Juri van Tuijl:
“It’s clear to all of us how important it is to protect ourselves against malicious individuals and states. We’ve always handled data with great care, and although we’re a small company, once we learned that our clients would be required to comply with the NIS2 directive, we decided to define and implement more formal procedures. We used the templates and overviews provided by Samen Digitaal Veilig, which were very helpful. We discovered that there was still room for improvement, and our entire team has become more aware of the risks we face and how to manage them effectively.”

Marco Bijl commented:
“During the audit, we reviewed the NIS2 Quality Mark requirements one by one, carefully considering Spatial Insight’s specific context and the choices they made in that light. We were ultimately able to conclude the audit positively, which led to their certification.”

NIS, the Network and Information Security Directive, is a European framework aimed at improving cybersecurity across the EU. In 2022, NIS2 was introduced as a successor to the original 2016 directive. The updated directive broadens the scope of sectors and services it applies to and includes stronger security obligations, improved coordination among member states, and more comprehensive requirements for reporting cyber incidents. EU Member States are currently in the process of transposing this directive into national legislation.

For more information:
Ignaz Worm
+31 6 13966446
ignaz.worm@spatial-insight.nl