By 2030, Dutch employers will no longer be allowed to deduct housing costs from minimum wage. What some call overreach, we call overdue. This isn’t about policy—it’s about dismantling silent control. At Xtroverso, we say: ethical wages require ethical structures.
Public consultation open until June 6. Read the full breakdown on our blog.

https://www.xtroverso.com/blog/governance-11/dutch-wage-law-shift-no-more-rent-cuts-by-2030-361

The Netherlands looked stable in 2024—on paper. But Q1 2025 tells a deeper truth: wage stagnation, housing strain, and underfunded systems are compounding. This isn’t decline—it’s quiet erosion. At Xtroverso, we say: don’t confuse snapshots with structure.
New blog live now—governance is pattern recognition.

https://www.xtroverso.com/blog/wise-4/the-dutch-success-trap-is-collapse-coming-360

As we look ahead to Infosecurity Europe, we’re also taking a moment to look back — just a bit more — on what made #RSAC2025 such a powerful event.

In this Brand Story conversation recorded on the show floor, I met once more with Steve Schlarman, to hear the Archer Integrated Risk Management perspective on the current state and future direction of #risk, #compliance, and #AI in #cybersecurity.

From regulatory complexity and AI-driven policy generation to the challenge of translating risk data into business decisions — this episode is packed with grounded insights and real-world applications.

Watch the video: https://youtu.be/7c6kKbwlfgE

Listen to the podcast: https://brand-stories-podcast.simplecast.com/episodes/why-ai-needs-context-not-just-hype-a-conversation-with-steve-schlarman-senior-director-product-management-at-archer-an-rsac-conference-2025-post-event-brand-story

Read the article: https://www.itspmagazine.com/their-stories/from-overhead-to-advantage-turning-compliance-into-a-strategic-asset-a-brand-story-with-steve-schlarman-from-archer-an-on-location-rsac-conference-2025-brand-story

And once again — a huge thank you to Archer for sponsoring our #RSAC 2025 coverage and helping us bring conversations like this to life.

Missed any of our RSAC 2025 episodes? Catch them all here: https://www.itspmagazine.com/rsac25

Want to meet us at Infosecurity Europe and tell your story with ITSPmagazine? https://www.itspmagazine.com/infosec25 or just DM me (Marco Ciappelli) or Sean Martin, CISSP

The AEX closed at 931.05 today (+0.16%). No surge, no slump—just disciplined stillness. Not calm, but composure in a tailored suit. For entrepreneurs, this isn’t a time to cheer—it’s a time to listen. Markets don’t always shout. Sometimes, they whisper.
Full reflection now live on the Xtroverso blog.

https://www.xtroverso.com/blog/today-s-pulse-14/the-aex-whispered-todaysmart-entrepreneurs-listened-359

Consumer confidence in NL sits at -37. Not panic—just a persistent chill across dinner tables, businesses, and plans. The number isn’t abstract—it’s structural doubt, a trust deficit. -61 on the economy, -21 on buying. At Xtroverso, we don’t fear these signals—we read them.
New article now live: confidence is clarity waiting to happen.

https://www.xtroverso.com/blog/wise-4/shocking-drop-why-dutch-consumer-confidence-just-hit-37-358

Amsterdam’s 20M visitors in 2024 came at a cost—now made visible. A 12.5% tourist tax, €14.50 cruise fee, zero-emission zones, and canal boat reforms signal a shift: tourism must pay for its impact. This isn’t hostility—it’s governance. At Xtroverso, we read it clearly: livability is now a priced asset.
Full article on the blog.

https://www.xtroverso.com/blog/wise-4/amsterdam-tourist-tax-the-real-cost-for-entrepreneurs-357

Great offer alert! My friend Gerald Auger from SimpleCyber has a #GRC course "GRC Jumpstart: GRC Foundations in Modern Cybersecurity" and he gave me permission to share his 'Pay What You Can' Code: GRCJUMPSTARTZERO !

https://academy.simplycyber.io/l/pdp/grc-foundations-in-modern-cybersecurity

PS If you can afford to pay the $20, please pay.

Can you help tip it over £400k raised for @goodlawproject to challenge the backsliding UK #supremeCourt decision re #trans people ?

https://goodlawproject.org/crowdfunder/supreme-court-human-rights-for-trans-people/

Klavdia finally sold me on this song. #GRC #Eurovision

Effiziente IT-Sicherheit für Behörden - Hiscout auf der PITS 2025

#Behörde #Compliance #DSGVO #GRC @HiScoutGmbH #ITGrundschutz #ITSicherheit #NIS2 #PITS2025 #PublicITSecurity

https://netzpalaver.de/2025/05/15/effiziente-it-sicherheit-fuer-behoerden-hiscout-auf-der-pits-2025/

From 2027, fossil-fueled company cars in NL will trigger a 52% payroll levy—stacked over bijtelling.

Not a fiscal footnote, but a governance marker.

In her latest article, Linda explains why this isn’t about taxation—it’s about alignment.

Your fleet will speak your values. Loudly.

Read the full analysis on the Xtroverso blog.

https://www.xtroverso.com/blog/governance-11/2027-your-company-car-will-expose-your-values-347

VAT isn’t a tax—it’s a trust test.

With Directive 8570/25, the EU redraws the line between access and accountability.

No IOSS? You're now liable. No tax rep? No entry.

Linda calls it what it is: not bureaucracy, but ethical architecture. 2028 isn’t the deadline.

It’s the mirror.

Are you in—or just passing through?

https://www.xtroverso.com/blog/compliance-7/eu-vat-shift-what-every-nl-entrepreneur-must-know-346

#xtroverso #netherlands #europe #vat #ethic #business #eu #compliance #governance #grc #2025

Rotterdam is blinking. Not collapsing—but warning.

Europe’s port titan drops 5.8% in Q1 freight, while Antwerp flexes. It’s not about trade—it’s about trust, agility, and risk.

Paolo Maria Pavan unpacks what this means for Dutch SMEs.

Spoiler: your supply chain is now a frontline issue.

Read, adapt, survive.

https://www.xtroverso.com/blog/wise-4/rotterdam-vs-antwerp-what-trade-shifts-mean-for-dutch-smes-343

When principles collide, only structure can decide.

Can Legal Professional Privilege still stand in a world demanding transparency?

Linda unpacks the ECJ’s pivotal case—where law, ethics, and fiscal power intersect.

A must-read for those who govern with clarity:

https://www.xtroverso.com/blog/compliance-7/the-privilege-paradox-law-ethics-financial-secrecy-318

The Netherlands boasts a 63K GDP per capita—but is that the whole story?

Our latest article uncovers the misleading metrics, hidden fragilities, and why Dutch entrepreneurs should look beyond the illusion of wealth.

Read the full piece on Xtroverso WISE

https://www.xtroverso.com/blog/wise-4/the-truth-behind-the-netherlands-63k-gdp-ranking-340

Heritage risk? It’s not about the past—it’s what your business carries into the future.

At Xtroverso, we uncover the hidden structures, decisions, and supplier chains that could expose your company without you even knowing.

Curious what you're inheriting? Read the full article.

https://www.xtroverso.com/blog/governance-11/heritage-risk-hidden-ecosystems-for-nl-entrepreneurs-341

What would security controls look that enforce poor cyber hygiene?

Control ID: ID-10T
Control Name: Promotion of Ineffective Password Practices
Control Family: Identification and Authentication (Organizational Users)
Control Statement:
The organization shall ensure that all users:

• Select passwords that are short, simple, and easy to remember, ideally consisting of common words, names of pets, or the current season and year (e.g., Password2025).
• Use the same password for every system, application, and online service to promote consistency and ease of recall.
• Record passwords on sticky notes and place them in highly visible locations near their workstations for quick access.
• Share passwords freely with coworkers, supervisors, contractors, and visiting dignitaries to promote teamwork and collaboration.
• Disable any multi-factor authentication systems that create needless barriers to productivity.
• Ignore prompts to change passwords, as this disrupts workflow and increases the risk of forgetting them.
• Store password spreadsheets on shared drives with names like passwords.xlsx to ensure everyone has what they need, when they need it.

Control Enhancements:

• (1) Encourage the use of default manufacturer credentials (e.g., admin/admin) and ensure they are never changed to preserve hardware documentation integrity.
• (2) Implement a company-wide password policy that explicitly discourages the use of password managers, citing overreliance on technology as a security risk.
• (3) Enforce password rotation policies every 3 days, requiring users to add a new number to the end each time.

Supplemental Guidance:
This control is designed to ensure that passwords remain user-friendly and that security does not interfere with the organization's most important priority: speed. Complexity, secrecy, and layered defenses only serve to frustrate users and should be avoided wherever possible.

Control Baseline Justification:
Applicable across all systems. Highly recommended for organizations with a strong commitment to trust, transparency, and breach notifications.