Ctrl Alt Debate: “DigiD in Dutch hands? It’s possible, it’s a political choice What if digital security is above all a well-told story? And what if the real problem is not with technology, but with not making choices? In this episode, Brenno de Winter joins Harm Teunis and Astrid Oosenbrug. Brenno is known for his sharp view of digital security and his fixed principle: what is demonstrably true and what especially reassures us?
Read moreThe acquisition of Solvinity for Logius services (position) This document describes the acquisition of Solvinity by Kyndryl and the significance for Logius’ services. The focus is on DigiD, but the message box is also discussed, because it facilitates a lot of communication between citizens and government. You can get this document as a PDF file here. Executive summary This position paper describes how the proposed acquisition of Solvinity by Kyndryl will materially change the strategic position of vital Dutch digital government facilities, despite the fact that operational services will remain intact in the short term. Since 2020, Solvinity has supplied the infrastructure and hardware platform under the direction of Logius for core facilities such as DigiD, MijnOverheid (including the Message Box) and Digipoort. Responsibility for policy, architecture and services lies entirely with the government, but technical continuity depends on a private infrastructure supplier.
Read moreThis conversation simply explains how MIAUW works and what the added value is. It is a clear summary, which is of course not comprehensive. It discusses the why, how MIAUW works and why you need clarity about the tests. In addition, it discusses well the audit value with the use of an auditor. We have created a transcript of the conversation: Speaker 1 Hello and welcome today we dive into the world of penetration testing. They are often called pen tests. You know how important cybersecurity is, right? Especially with new legislation such as, well, NIS2, which increases the pressure.
Read moreEvery now and then we hear that the Methodology for Information Security Research with Audit Value (MIAW) would make penetration tests (pen tests) more expensive. But is that really the case? I would like to explain why MIAUW contributes to transparency, quality and in many cases even results in cost savings. What is MIAUW? MIAUW is a structured methodology for carrying out penetration tests (technical security research). Where the customer often does not know what to ask and how to get real guidance, MIAUW helps with purchasing requirements and requirements for research, with an emphasis on transparency, reproducibility and audit value. It provides organizations with a clear framework to plan, conduct and evaluate pen testing, and ensures that all key aspects of a security investigation are documented. This is essential to comply with legislation such as the GDPR, NIS2 Directive and the upcoming Cyber Resilience Act (CRA). This legislation requires those responsible in the organization (the director) to demonstrate that you comply with the legislation.
Read moreEddy Willems in conversation with Brenno de Winter, information security and privacy expert. In the latest episode of the podcast series ‘My Precious Data’, Eddy Willems, Security Evangelist at WAVCi, talks to Brenno de Winter, a leading expert in the field of information security and privacy. Brenno is known for his in-depth knowledge and experience, including his involvement in cracking the public transport chip card and his work as Chief Security & Privacy Operations at the Ministry of Health, Welfare and Sport in the Netherlands.
Read more