LOGO_CNK_blauw_RGB_EN

Cyber standards in procurement processes: how do you apply them? | September 22, 2026

Cybersecurity has long ceased to be a purely technical issue. In the road and rail sector, it is increasingly becoming an integral part of tenders, contracts, and collaborations. At the same time, this raises new questions. Where does the responsibility of the client lie, and where does that of the contractor begin? How do you ensure that cyber requirements remain proportionate for different types of organizations and projects? And how do you prevent requirements on paper from failing to align with practical reality?

With the introduction of the NIS2/Cybersecurity Act, this issue is becoming increasingly urgent and concrete. Organizations in the sector are more frequently encountering cyber requirements in tenders, while there is a growing need for clarity, workable agreements, and a shared understanding of responsibilities.

Therefore, the Ministry of Infrastructure and Water Management, on behalf of the Program for Strengthening Cyber Resilience in the Road and Rail Sector, and Connekt are organizing a dialogue session on Tuesday, September 22, regarding the application of cyber standards in procurement processes.

During this session, clients and contractors from the road and rail sector will share their experiences. How do they handle cyber requirements in tenders? What considerations do they make? What challenges do they face in the collaboration between client and contractor? And which approaches prove effective in practice?

Following several practical examples, participants will engage in discussion based on a number of propositions. The meeting offers space for an open dialogue between clients and contractors. The goal is not only knowledge sharing but also gathering insights that can contribute to a future-proof and cyber-resilient road and rail sector.

Program

1:00 PM – 1:30 PM | Arrival and reception
Coffee, tea, and an opportunity to meet other participants.

1:30 PM – 1:45 PM | Welcome and opening
Introduction by the Ministry of Infrastructure and Water Management regarding the background and purpose of the meeting.

1:45 PM – 2:45 PM | Practical experiences from the sector
Clients and contractors from both the road and rail sectors share their experiences with cyber standards in tenders and projects.

2:45 PM – 3:00 PM | Break

3:00 PM – 3:45 PM | Interactive dialogue and propositions
In mixed groups, participants discuss current issues and practical dilemmas.

3:45 PM – 4:00 PM | Plenary closing
The most important insights and outcomes of the discussions will be shared collectively. We will translate these insights into a joint agenda for the sector: which issues require further collaboration, knowledge sharing, or development?

4:00 PM – 5:00 PM | Networking drinks
Opportunity for further conversation.

Who is it for?
Are you involved in procurement, contract management, cybersecurity, asset management, or project execution within the road and rail sector? Then we cordially invite you to contribute your thoughts, exchange experiences, and engage in dialogue with colleagues from the sector.

Background
Would you like more background information on the Cybersecurity Act? Read our news item from June 19, in which we outline the most important developments and implications: Cybersecurity Act approaching: what does this mean for ITS service providers?