Join Connect2Trust

The services of Connect2Trust can be found on the “What we do” webpage.

No, registering your organization remains an individual legal obligation for every organization that, based on a self-assessment, has determined that the CBW applies. Registering your contact details also enables the NCSC to contact you directly in case of emergencies.

The National Cyber Security Centre (NCSC) provides both direct and indirect information about threats and vulnerabilities within the Kingdom of the Netherlands. Connect2Trust provides that same information for all branches belonging to a holding company, regardless of whether they are located inside or outside the Netherlands.

Furthermore, the NCSC differentiates the information it distributes based on your organization’s status under the CBW. Connect2Trust receives this information as well and shares it regardless of CBW status. Registering your network data (IP addresses and domain names) with Connect2Trust also prevents this data from being registered at the NCSC as non-traceable to your organization.

You can sign up via the registration form (link). In this form, you indicate which services you wish to purchase and provide contact details so we can send the participation documents for digital signature by your organization’s representatives and the authorized signatory for data processing.

Once all digital signatures have been received, you will first be granted access to our Self-Service Portal. In this portal, each representative can select the desired services and enter or manage the necessary organizational and/or network data.

Depending on the chosen services, a representative will also gain access to other portals where the relevant information can be found, or through which systems can be synchronized or connected. Every representative always receives access to our knowledge management system, which contains documentation and facilitates mutual collaboration.

The costs depend on the selected services. The participation documents include a “menu” describing the prices per component and how they are calculated. These prices are also listed in the Self-Service Portal. If desired, a quotation can be sent prior to digital signing. Please note that additional information, such as the quantity of network data, may be required for this quote.

Connect2Trust shares specific threat information for target and victim notification, as well as general threat intelligence such as CVEs, advisories, reports, and Indicators-of-Compromise (IoCs).

Connect2Trust strives for maximum automation in delivering and processing every information stream for IT, OT, and IoT. In addition to delivery via email, Connect2Trust is constantly working on extra options for creating automated processing links and unlocking new information sources and streams.

Yes, you can. Please contact info@connect2trust.org. Clearly state the information you are looking for, and we will ensure it is sent to you. If desired, we can also schedule a meeting to provide further clarification.

Yes, that is possible, but the digital signature must always be provided by the organization’s own representatives and authorized signatories. This is due to the personal data processed by Connect2Trust. However, after registration, you may indicate whether notifications should be sent to third parties, such as an MSP, MSSP, or sectoral CERT. This allows Connect2Trust to ensure that receiving information is not strictly tied to a single customer or supplier relationship.

Yes, you can. The same signing restrictions apply as with customers or suppliers, but there is an added benefit: all participants within the ISAC or partnership receive the same level of information. This enables mutual assistance and coordination via a (sectoral) CSIRT. Connect2Trust already facilitates this for several ISACs and partnerships and is happy to share these experiences. For more information, please email info@connect2trust.org.

Trust is a core value at Connect2Trust. Everyone we work with signs an NDA or a cooperation agreement containing an NDA. Additionally, we require a Certificate of Conduct (VOG) from every volunteer and freelancer we collaborate with. The security of our systems and information is also a top priority; our CISO and Technical Team are continuously alert and seeking the best solutions to store our information securely and facilitate our systems in the safest way possible.

Confidentiality is essential and is safeguarded through various measures. Physical meetings must be attended in person to maintain confidentiality; face-to-face interaction helps build mutual trust and ensures you know exactly who you are talking to.

For digital meetings, participants are always alerted to potential conflicts of interest before sensitive information is shared. Furthermore, a code of conduct is included in the participation documents, and the self-service portal has terms of use that allow the board to exclude participants from meetings or services if these rules are violated.

As a participant of Connect2Trust, you are automatically invited to meetings and events. In addition to CISO meetings, participants can start specialized meetings (so-called “Tables”) around specific topics, such as our OT Table. Those who start these Tables can choose to make them hybrid, allowing participation from employees of member organizations (not necessarily the official representatives) as well as invited external experts. If you wish to join a Table, email info@connect2trust.org, and we will put you in touch with the chairpersons.

It’s great that you’re interested! As a foundation, Connect2Trust is always happy to welcome volunteers. We have two volunteer coordinators who will first hold an introductory meeting to see if there is a match.

To apply, send an email to volunteers@connect2trust.org with your motivation. Why do you want to volunteer? What can you contribute? And what would you like to learn? Our coordinators will then get in touch with you.

We invoice twice a year. At the beginning of the year, we invoice based on your current services as known on the reference date. At the end of the year, we send a corrective invoice if changes have occurred. This can result in either a credit or a debit. Changes are corrected pro rata from the moment the change was implemented.