The Dutch National Cyber Security Centre partnered with ML6 to deploy AI tools that write vulnerability advisories three times faster and answer NIS2 compliance questions 70% faster, publishing the systems in the national algorithm register for public accountability.
~3x faster
Advisory-writing time reduction
70% faster
NIS2 compliance question response-time reduction
85%
Cost reduction for building further AI assistants
Details
Maturity
Established
Promoter
Nationaal Cyber Security Centrum (NCSC-NL)
Period
2024-2025
Keywords
cybersecurity, critical infrastructure, public administration, NIS2 compliance
Context
NCSC-NL supports Dutch critical infrastructure operators under the EU's NIS2 directive, which requires timely vulnerability advisories and compliance guidance.
Activities
NCSC-NL partnered with ML6 to build three internal AI tools: one drafting CVE-based vulnerability advisories, one answering staff NIS2 compliance questions, and one helping ENSOC staff find rules and records across languages. All three are published in the Dutch national algorithm register.
Results
The advisory-drafting tool cuts writing time roughly threefold (with human validation of every output before publication); the compliance assistant answers questions 70% faster; reusing shared secure components cut the cost of building further AI assistants by a reported 85%.
Conclusions
These are efficiency figures from the technology partner's case study rather than an independent audit, and no public data compares advisory accuracy or NIS2 response quality before and after — only speed.
Implementation
Indicative cost
Medium (€50k–€500k)
Time to results
Medium (1–3 years)
Staffing & skills
NCSC-NL, ML6 (AI consultancy partner)
Conditions for success
human analyst validation of every AI-drafted advisory
publication in the national algorithm register for accountability
Common failure modes
no independent audit of accuracy or response quality, only speed metrics
Australia's Digital Transformation Agency piloted a draft AI impact-assessment framework with 21 volunteer federal agencies, testing whether it caught risks …
Since April 2019, Canada's Directive on Automated Decision-Making has required every federal automated decision system to complete a public Algorithmic …
The UK's Algorithmic Transparency Recording Standard requires central government bodies to publish structured records of algorithmic tools that significantly influence …
