ABRO 2026 — what the new government security requirements mean for suppliers

What changed from ABDO to ABRO

The ABDO 2019 was a defence instrument: security requirements for companies working on Ministry of Defence contracts. The ABRO generalises that regime across the central government. Any contract that touches a Te Beschermen Belang — an interest whose compromise could harm national security — can now carry ABRO requirements, whether the buyer is a ministry, an agency, or the police. Assessments sit with the NBIV (Nationaal Bureau Industrieveiligheid), the joint AIVD/MIVD body stood up in March 2025, which issues risk assessments to contracting authorities.

The practical consequence for suppliers: security readiness stops being a defence-sector specialty and becomes a general condition of doing security-sensitive business with the Dutch state.

The timeline

• 1 January 2026 — ABRO in force for ministries, agencies, and the police, with a two-year implementation runway
• 1 July 2026 — the Ministry of Defence applies ABRO to new contracts
• 2027–2029 — municipalities and provinces follow in phases

The supplier obligations

• Governance and accountability — a named security-responsible structure the contracting authority can hold to account
• Personnel screening — vetting appropriate to the sensitivity of the work, maintained for the contract's duration
• Physical security and access management — protection of the sites and spaces where the protected interest is handled
• IT, OT, and cloud configured to the assigned security level
• Supply-chain and sub-supplier control — primes must evidence that their suppliers comply, not merely promise it
• Immediate incident reporting and continuous evidence of effectiveness — readiness is demonstrated, not declared

What bid-ready looks like

ABRO readiness is largely the same discipline the Wwke demands of critical entities: a threat-led risk assessment, proportionate physical and personnel measures, and documentation that survives an assessor's scrutiny. Suppliers who prepare the evidence pack before the tender — screening policy, access-control regime, incident procedure, sub-supplier declarations — turn a disqualifier into a differentiator. Mission Support supports suppliers and contracting parties with physical security assessment and design, personnel-security posture, and the exercise-based validation that turns a paper regime into demonstrable capability. Related reading: the Wwke critical-entities regime and vetted-supplier criteria for governmental tenders.

Last reviewed: 12 August 2026. Orientation summary, not legal advice — the ABRO text and your contracting authority's requirements govern.