Organisations that carry out contracts with the Dutch government or police sometimes must meet additional security requirements. This applies to contracts that pose risks to national security. These requirements are set out in the General Security Requirements for Government Contracts (abbreviated ABRO in Dutch). But what exactly do they entail, and who do they apply to?
The ABRO applies to ‘special contracts’ that pose risks to national security. This includes contracts for weapons systems for the Defence Forces, ICT services, and situations where personnel have access to sensitive information. Once the Defence Forces begin implementing the ABRO, the requirements will apply to new contracts. Existing Defence contracts will continue to be governed by the General Security Requirements for Defence Contracts (ABDO).
4 security levels
The ABRO categorises ‘protected interests’ into 4 levels, ranging from departmental confidential (level 4) to state secrets (level 1). The ABRO sets out the requirements for each security level. Most contracts fall under level 4, which has less stringent requirements than levels 1, 2, and 3. Often, level 4 requirements are based on industry standards that many companies already know.
ABRO’s rules and agreements
The cabinet also aims to encourage other government organisations and private companies to adopt the ABRO. This includes independent administrative institutions, provinces, municipalities, water authorities, and energy supply companies. The ABRO comprises the following agreements:
- The Framework Decision ABRO Government (Dutch) applies to ministries, their departments, and their agencies. It sets out the steps a ministry must take when addressing procurement risks to national security.
- The police have signed a convention on applying the ABRO Government Framework Decision (Dutch).
More information
Further information is available on Government.nl (English).
Or watch the Dutch-language animated video below (English translation in the caption):
Translation of the video voice-over:
This animated video from the Dutch government explains the General Security Requirements for Government Contracts, known as the ABRO. The animation visually illustrates the voice-over text.
ABRO in brief: What you need to know
Voice-over: "The government is one of the largest clients in the Netherlands. For government contracts that pose national security risks, it is especially important that the company's security is properly managed. By implementing appropriate security measures, companies reduce the risk of cyberattacks and espionage.
Therefore, security requirements apply to companies undertaking these types of contracts. These requirements are set out in the General Security Requirements for Government Contracts, commonly known as the ABRO.
The ABRO applies to all procurement contracts for the Dutch government and the police that pose risks to national security. Before a client puts a contract out to tender, they assess whether the contract poses any risks to national security. This may be because sensitive information is shared with the company.
If risks to national security are identified, the ABRO requirements apply. The National Industrial Security Agency (NBIV) then investigates, before the contract starts, whether the company meets these requirements. It examines the company's governance, organisation, and personnel.
Depending on the nature of the contract, the NBIV also investigates how the company has organised the physical and digital security of the project.
Once the company meets the requirements, the ABRO certificate is issued and the contract can commence. Thanks to the ABRO, Dutch companies and society as a whole become more resilient. Moreover, companies apply the same security requirements across all contracts awarded by the Dutch government and the police.
Want to know more about the ABRO? Visit the website."
The Dutch government logo appears on screen.
On-screen Text:
Would you like to know more?
Visit Rijksoverheid.nl/ABRO
