Information Security

Sovereignty is not ideology, it is security policy

My article in AG Connect: the US sanctions against the International Criminal Court show that digital dependency is a concrete information security risk.

Core value: safety first

Safety first sounds simple, but it is a tough choice. It means that information security is not added at the end of a project nor should it be allowed to disappear behind convenience, speed or marketability. Safety is the starting point for design, implementation and accountability. The wording is deliberately close to aviation. In aviation, safety first is not a poster slogan, but a way of working: standard procedures, checklists, crew resource management, reporting culture, training, incident investigation and the discipline not to normalize unnecessary risk under time pressure. A flight is not safe because nothing went wrong, but because people, processes and technology are arranged so that errors are caught, deviations are reported and lessons return to operations.

Podcast: CTRL-ALT-DEBATE about Sovereignty and DigiD

Ctrl Alt Debate: “DigiD in Dutch hands? It’s possible, it’s a political choice What if digital security is above all a well-told story? And what if the real problem is not with technology, but with not making choices? In this episode, Brenno de Winter joins Harm Teunis and Astrid Oosenbrug. Brenno is known for his sharp view of digital security and his fixed principle: what is demonstrably true and what especially reassures us?

Position paper round table discussion in the House of Representatives January 27, 2026

The acquisition of Solvinity for Logius services (position) This document describes the acquisition of Solvinity by Kyndryl and the significance for Logius’ services. The focus is on DigiD, but the message box is also discussed, because it facilitates a lot of communication between citizens and government. You can get this document as a PDF file here. Executive summary This position paper describes how the proposed acquisition of Solvinity by Kyndryl will materially change the strategic position of vital Dutch digital government facilities, despite the fact that operational services will remain intact in the short term. Since 2020, Solvinity has supplied the infrastructure and hardware platform under the direction of Logius for core facilities such as DigiD, MijnOverheid (including the Message Box) and Digipoort. Responsibility for policy, architecture and services lies entirely with the government, but technical continuity depends on a private infrastructure supplier.

An explanation of MIAUW in less than six minutes

This conversation simply explains how MIAUW works and what the added value is. It is a clear summary, which is of course not comprehensive. It discusses the why, how MIAUW works and why you need clarity about the tests. In addition, it discusses well the audit value with the use of an auditor. We have created a transcript of the conversation: Speaker 1 Hello and welcome today we dive into the world of penetration testing. They are often called pen tests. You know how important cybersecurity is, right? Especially with new legislation such as, well, NIS2, which increases the pressure.

The importance of critical evaluation of technologies to strengthen cybersecurity (podcast) - Eddy Willems

Eddy Willems in conversation with Brenno de Winter, information security and privacy expert. In the latest episode of the podcast series ‘My Precious Data’, Eddy Willems, Security Evangelist at WAVCi, talks to Brenno de Winter, a leading expert in the field of information security and privacy. Brenno is known for his in-depth knowledge and experience, including his involvement in cracking the public transport chip card and his work as Chief Security & Privacy Operations at the Ministry of Health, Welfare and Sport in the Netherlands.