Empty shelves show the Netherlands is poorly prepared for a major cyber threat

A recent IT incident at supermarket chain Albert Heijn, which resulted in empty shelves and pricing errors, has highlighted the Netherlands' vulnerability to cyber threats. Experts argue that many Dutch organizations prioritize efficiency over resilience, leaving them ill-prepared for potential disruptions. Experts such as Dave Maasland and Rick van der Kleij suggest that businesses must transition from a just-in-time approach to a just-in-case mindset, incorporating offline backups and conducting regular simulations to identify weaknesses. This incident follows other notable disruptions in the country, including issues at the Maasstad Hospital, the Public Prosecution Service, and Eindhoven Airport.

The National Cyber Security Center emphasizes that organizations must identify their critical digital assets and establish robust recovery plans. While investments in cybersecurity are often viewed as unnecessary costs, the increasing digitization of society demands a shift in priorities. The implementation of the European NIS2 directive aims to enforce higher standards of digital resilience across numerous Dutch entities. Moving forward, experts advocate for greater transparency and collaborative risk management to ensure that supply chains and essential services remain protected against evolving criminal threats.