Disclaimer
Munitor Compliance makes your duty of care demonstrable. It is not a certificate, not a quality mark and not legal advice.
What the outcomes do say
The scope check, the baseline assessment and the evidence file show what you have arranged, who is responsible for it and where the evidence sits. That is exactly what a customer or supervisor can reasonably ask of you.
What they do not say
They do not state that you comply with the Cybersecurity Act: that judgement rests with the supervisor, never with a supplier. They also do not replace an audit or legal advice about your specific situation.
You file the report yourself
You report an incident to the CSIRT yourself via mijn.ncsc.nl. The tool guards the 24- and 72-hour deadlines and prepares a draft notification; sending it and its content remain your own responsibility.
Currency
Laws and regulations change. We update the knowledge base and the measures as needed, but a page on this site does not create legal rights.