Brochure: Critical Entities Resilience Act (Wwke)
Download our brochure: Critical Entities Resilience Act (Wwke)
Wwke (Critical Entities Resilience Law): from obligation to strategic advantage
If we are totally honest..
the Wet weerbaarheid kritieke entiteiten, or Wwke (in English: the Critical Entities Resilience Law) has only recently been formalized and not all requirements are known yet. What is clear, however, is that proper preparation starts now. Not with entirely new systems or frameworks, but with a critical review of existing risk management and control processes. By building on these foundations, your organisation will not only comply with the law, but also strengthen its resilience and adaptability. In doing so, you contribute to the resilience of Dutch society as a whole.
the Wet weerbaarheid kritieke entiteiten, or Wwke (in English: the Critical Entities Resilience Law) has only recently been formalized and not all requirements are known yet. What is clear, however, is that proper preparation starts now. Not with entirely new systems or frameworks, but with a critical review of existing risk management and control processes. By building on these foundations, your organisation will not only comply with the law, but also strengthen its resilience and adaptability. In doing so, you contribute to the resilience of Dutch society as a whole.
Article: Resilience is everyone’s responsibility and therefore sometimes no one’s |
Our society is becoming increasingly dependent on vital services such as energy, drinking water, transport and healthcare. At the same time, risks are increasing, ranging from sabotage and terrorist offences to extreme weather conditions and technical failures. The Wwke requires organisations to prepare more effectively for such disruptions. This is not only about compliance, but above all about strengthening the resilience of organisations that provide essential services.
Who does it apply to?
The government determines which organisations fall within the scope of the Wwke. If your organisation is designated, it will be classified as a critical entity: an organisation that is essential to the functioning of society. The law applies to a broad range of sectors, including energy, transport, banking, infrastructure, healthcare, drinking water and wastewater, digital infrastructure, government, space, and food.
When?
On 15 April 2026, the House of Representatives (Tweede Kamer) adopted the bill. The designation of critical entities is expected to be completed during 2026. From that moment, organisations will have nine months to perform an initial risk assessment and demonstrate compliance with the applicable obligations.
Has your organisation been designated as a critical entity?
The government requires organisations to implement a number of measures and integrate them into existing processes. Based on currently available information, these include a risk assessment, a duty of care for risk management, and incident reporting obligations. How prepared is your organisation?
The government determines which organisations fall within the scope of the Wwke. If your organisation is designated, it will be classified as a critical entity: an organisation that is essential to the functioning of society. The law applies to a broad range of sectors, including energy, transport, banking, infrastructure, healthcare, drinking water and wastewater, digital infrastructure, government, space, and food.
When?
On 15 April 2026, the House of Representatives (Tweede Kamer) adopted the bill. The designation of critical entities is expected to be completed during 2026. From that moment, organisations will have nine months to perform an initial risk assessment and demonstrate compliance with the applicable obligations.
Has your organisation been designated as a critical entity?
The government requires organisations to implement a number of measures and integrate them into existing processes. Based on currently available information, these include a risk assessment, a duty of care for risk management, and incident reporting obligations. How prepared is your organisation?
We would be happy to discuss a realistic and practical approach with you.
Below are the areas in which we can support your organisation.
|
|
| The result A clear understanding of your current situation, the key areas for attention, and the steps required to further strengthen your organisation's resilience. | The result
|
The Wwke requires a comprehensive risk assessment. We support organisations in systematically identifying risks and vulnerabilities that may affect the continuity of their services. Our approach builds on existing risk assessments and methodologies already in place within your organisation. |
The exact requirements regarding the duty of care and reporting obligations have not yet been fully defined. At the same time, it is clear that organisations will be required to implement appropriate measures and report incidents in a timely manner. We help translate these requirements into a practical approach that is tailored to your organisation and aligned with existing processes and ways of working. |
| The result A risk assessment that provides insight into your most significant risks and vulnerabilities and helps establish the right priorities. | The result A practical implementation of the duty of care and incident reporting obligations that is workable in day-to-day operations and flexible enough to adapt to future developments. |
Expand your understanding of the Wwke
What risks does the Wwke present for organisations? And which measures require particular attention? In a two-part article series, our specialists share their perspectives and practical insights. The first article is now available via the button below. The second article will be published on 27 October.
Read more about the key risks and considerations for organisations preparing for compliance with the Wwke.
Read more about the key risks and considerations for organisations preparing for compliance with the Wwke.
Want to know more?
Ivo ten Have Senior Consultant Risk Consulting
