Strong together for a clean network

Systems and networks of digital infrastructure providers are vulnerable and a popular target for abuse, for example by cybercriminals. Botnets, phishing, DDoS and ransomware are all examples of abuse that occur from networks of such providers, usually without their knowledge. Therefore, they have an important responsibility to address abuse. Clean Networks accounts for this and helps providers to clean and maintain their networks. To achieve this, Clean Networks consists of two pillars: a Code of Conduct and a technical platform.

The Code of Conduct
The Code of Conduct for Abuse Prevention is widely supported within the Dutch internet sector and involved stakeholders. The Code of Conduct helps providers take effective measures against abuse, such as a know your customer policy, applying the Code of Conduct notice and takedown, and a general, recognizable email address for abuse reports that is read daily.

Signing and adhering to the Code of Conduct not only helps in implementing effective measures but also provides access to the Clean Networks quality mark. With this quality mark, providers distinguish themselves in the market from providers without a clear abuse policy.

This is interesting for several reasons. For example, there is a visible trend in the procurement policies of governments to prefer providers with such a quality mark over those without. Additionally, NIS2 and the DSA create legal obligations to demonstrably ensure the detection and mitigation of security vulnerabilities in networks organizationally and technically. The chain responsibility associated with NIS2 will also ensure that non-NIS2 entities will face these requirements.

In short, those who want to have their operational compliance in the area of abuse in order, join Clean Networks and endorse the Code of Conduct.

The platform
Besides the Code of Conduct, Clean Networks consists of a technical platform. Through this platform, information about security vulnerabilities and abuse is automatically distributed among participants. These notifications are tailored to individual participants so they can act specifically.

Because the platform is developed specifically for digital infrastructure providers, the information provided is tailored to this sector. NBIP also collaborates within the framework of Clean Networks with the National Cyber Security Center (NCSC) and the Ministry of Justice & Security and will be a switching organization under the new Cybersecurity Act (the Dutch implementation of NIS2).