Skip to main content
5 minute read

Ready for ABRO 2026?

Managing national security risks

The world is changing rapidly. Geopolitical tensions, cyber threats and espionage are increasing. For Dutch central government organisations, the police and key suppliers, this means that resilience must be strengthened in a structural way.

With the introduction of ABRO 2026, security requirements for contracts involving national security risks are becoming more stringent. But what does this mean in practice for your organisation? And how can you ensure you are prepared in time?

ABRO 2026 at a glance

The General Security Requirements for Central Government Contracts (ABRO 2026) have been developed to improve the management of national security risks within procurement processes. ABRO 2026 applies to so-called special contracts: contracts in which suppliers work with Interests to be Protected (ITBP) (Te Beschermen Belangen – TBBs) or special information.

Examples include work carried out in environments where state-secret information is handled, the delivery of IT services supporting critical processes, or the supply of essential components for police or defence vehicles. ABRO 2026 is a contractual set of security requirements that only applies to contracts involving risks to national security.

How does ABRO 2026 work?

ABRO 2026 is structured into five chapters and distinguishes between four different security levels. Depending on the type of work carried out within a special contract, different chapters may apply. Chapters 1 and 2 always apply.

The contracting authority determines in advance which security level is required. This provides clarity upfront on which parts of ABRO 2026 and which associated requirements apply to the specific special contract.

Who is this relevant for?

For government organisations, ABRO means you are responsible for applying ABRO 2026 in a targeted way to address national security risks within procurement processes. You identify where national security risks may arise, determine the appropriate security level and ensure that ABRO 2026 is properly incorporated into the procurement process.

For companies and future contractors, ABRO 2026 introduces additional security requirements. These only apply to contracts involving potential national security risks. Furthermore, the requirements do not apply to the entire organisation, but only to the parts of the business directly involved in delivering the relevant contract.

Since 1 January 2026, the implementation of ABRO 2026 has started for the first tranche: ministries, their departments and agencies, and the police. Over the next two years, more central government organisations will begin applying ABRO 2026, and it will appear more frequently in procurement procedures. Preparing in time is therefore essential.

How do you prepare as a government organisation?

For government organisations, ABRO 2026 means applying these security requirements in a targeted way within procurement processes to address national security risks. This requires insight, clear decision-making and an organisation that is properly equipped to support this approach.

How do you prepare as a company?

For companies and future contractors, ABRO 2026 means dealing with additional security requirements for contracts involving national security risks. This requires insight into your potential role and the impact on your organisation.

By taking these steps in time, you avoid unexpected issues and are better prepared for future ABRO 2026 contracts.

How can we help?

ABRO 2026 requires more than simply understanding regulations. It requires oversight, clear choices and an approach that works in practice.

We help government organisations apply ABRO 2026 effectively within procurement processes, enabling you to maintain control over national security risks. This ensures you not only comply with ABRO 2026 but also embed it sustainably within your processes and organisation. We support organisations with:

  • Insight into relevant legislation and regulations
  • Identification of Interests to be Protected (ITBP) and risks
  • Implementing required changes to processes, systems and governance
  • Setting up processes and training for the effective application of ABRO 2026

We help companies and future contractors translate complexity into concrete actions, enabling you to manage risks and prepare for future contracts. This ensures you not only comply with ABRO 2026 but also strengthen your resilience in a sustainable way. We support organisations with:

  • Insight into potential ABRO-related contracts
  • Defining the relevant organisational units and supply chain partners
  • Conducting impact assessments and determining required measures
  • Supporting the implementation of ABRO measures for specific contracts

Would you like to know more about ABRO 2026 and how we can support your organisation? Please get in touch.

Did you find this useful?

Yes
No

Thanks for your feedback

Your feedback is important to us

To tell us what you think, please update your settings to accept analytics and performance cookies.

Need help updating cookies?

Contact us

Remco van Mosel

Remco van Mosel

Partner in Technology & Transformation
+31882861570

Our thinking

Strategy & Business Design

Explore how our advisory services and consulting support can enable you to design your business and unleash its future potential.  
Service

Minimum Viable Organisation: Maximise Resilience in uncertain times

Define your Minimum Viable Organisation: know what to prioritise, what to protect and how to pressure — read how.

Wet weerbaarheid kritieke entiteiten (Wwke)

The CER (Critical Entities Resilience) directive strengthens the physical, digital and economic resilience of organisations that provide essential services. In the Netherlands the directive is implemented through the Wet weerbaarheid kritieke entiteiten (Wwke). The law places obligations on organisations designated as critical entities and on organisations that provide significant services to these critical entities.
Analysis

Solution Transformation

Customer needs are rarely met with an offering of products alone. Integrating software and services that complement your products or the use thereof into a seamless solution can create additional value.
Service

Let's connect

Deloitte refers to one or more of Deloitte Touche Tohmatsu Limited (“DTTL”), its global network of member firms, and their related entities (collectively, the “Deloitte organization”). DTTL (also referred to as “Deloitte Global”) and each of its member firms and related entities are legally separate and independent entities, which cannot obligate or bind each other in respect of third parties. DTTL and each DTTL member firm and related entity is liable only for its own acts and omissions, and not those of each other. DTTL does not provide services to clients. Please see www.deloitte.com/about to learn more. 

Deloitte Austria, Deloitte Belgium, Deloitte Central Europe, Deloitte Central Mediterranean, Deloitte France, Deloitte Germany, Deloitte Ireland, Deloitte Luxembourg, Deloitte Middle East, Deloitte Netherlands, Deloitte Nordic, Deloitte Portugal, Deloitte Spain, Deloitte Switzerland, Deloitte Türkiye and Deloitte UK or their affiliates are shareholders in Deloitte EMEA BV (EMEA), which is a member firm of Deloitte Touche Tohmatsu Limited (DTTL). Deloitte EMEA and DTTL do not provide services to clients. Services may be provided by the EMEA shareholders or their affiliates, which are separate and independent legal entities.

In The Netherlands the services are provided by independent subsidiaries or affiliates of Deloitte Holding B.V., an entity which is registered with the trade register in The Netherlands under number 40346342.

© 2026. For information, contact Deloitte Global.