Security requirements for government contracts that entail risks to national security
As of 1 January 2026 new security requirements will come into effect for companies that carry out public-sector contracts that entail a risk to national security. These are known as the General Security Requirements for Government Contracts (ABRO), and they apply uniformly throughout central government. ABRO reduces the risks to national security, such as cyber attacks and espionage.
Threats to the Netherlands’ security
Security in the Netherlands is regularly under threat, for example from:
- espionage;
- hackers targeting computer networks;
- the leaking of sensitive information;
- sabotage of, for example, power and internet cables.
There are also dangers to national security in the contracts that the government concludes with private-sector companies. This can occur when a company is entrusted with state secrets.
The public and private sectors to work together in a more secure way
The government is seeking to better protect national security. This is why additional security requirements will be imposed on companies that carry out public-sector contracts that entail a risk to national security. These are known as the General Security Requirements for Government Contracts (ABRO).
When the ABRO takes effect in 2026:
- Companies will have to observe the same security requirements regardless of the government body they happen to be working for. It does not matter whether their contract is with a ministry, an agency or the police.
- A single organisation will verify that companies are in compliance with the requirements.
Investigating national security risks
The Designated Security Authority (NBIV) monitors whether companies are in compliance with the ABRO. The NBIV examines a variety of factors, including:
- the organisation and management of the company;
- employees and their trustworthiness;
- conventional security features, such as safes and fences;
- cybersecurity, such as computers, digital networks and cloud services.
If a company is not in compliance with the ABRO, it will not be awarded central government contracts that relate to national security. Should a company no longer satisfy the ABRO at some point during the contract period, the NBIV can suspend the contract.
Introduction of ABRO as of 2026
Central government organisations will start applying the ABRO over a two-year period starting in 2026. The exact date of introduction will vary by organisation. In 2026 and 2027 the following organisations will start applying the ABRO:
- the police;
- ministries, their services and agencies. The Ministry of Defence will apply the ABRO to new contracts. For existing defence contracts the General Security Requirements relating to Defence Orders (ABDO) (page in Dutch) will continue to apply.
The government also would like other companies and public-sector organisations to start applying the ABRO, e.g. autonomous administrative authorities, provinces, municipalities, water boards and energy companies.
More information
If you would like to know more about the ABRO, please email ABRO@minbzk.nl.