In short: Cybersecurity starts with being well-prepared for digital threats, such as phishing and ransomware. DEN helps cultural organizations get started with 4 concrete steps. Start with a free check, work with a practical step-by-step plan, increase knowledge and awareness with a workshop, and create an incident and recovery plan. This way, you can build a secure and resilient organization step by step.
The DEN Cybersecurity Scan 2026
In 2023, we conducted research on digital security among cultural organizations. Among other things, it showed that three out of ten organizations experienced a cyber incident in the past three years.
We are curious to see to what extent cultural organizations are aware of the risks three years later and how they protect themselves against them. This helps us gain insights and develop offerings accordingly. All participants from the cultural sector are welcome, even if you are not responsible for IT or cybersecurity.
Fill out the questionnaire and get a chance to participate for free in the workshop Cybersecurity: create an incident and recovery plan on November 17, 2026 (opens in new tab), worth € 249. Filling out the questionnaire takes about 10 minutes.
Step 1: Check where you stand
Where do you start? Begin with the accessible CyberSafety Check – developed in collaboration with the National Cyber Security Centre (NCSC). In no time, you can map out your current digital status. You'll receive a clear action list with quick wins: simple steps that allow you to establish basic security today.
Step 2: Anchored and well-considered progress
With the Cybersecurity Step-by-Step Plan – developed in collaboration with TwynstraGudde – you can broaden the scope by structurally embedding cybersecurity in your organization. You identify the indispensable crown jewels, make targeted decisions about risks, and ensure that digital security becomes a fixed, integral part of daily operations.
Step 3: Get started practically
Want to get started with cybersecurity quickly? Join the online workshop Cybersecurity in the cultural sector (opens in new tab). In just two hours, you'll take the first steps from the step-by-step plan toward a strong and secure digital foundation. And the best part: you don't need to be a technical specialist for this.
Step 4: Create an incident and recovery plan
Prevention is better than cure, but what if something goes wrong? To avoid improvising during a crisis, we delve deeper into crisis preparation in the workshop Create an incident and recovery plan (opens in new tab). Together with peers, you'll work on your guide where you outline who does what, how communication flows, and how to effectively limit damage. Check out DEN's cyber incident guide (opens in new tab) as your first point of reference.
Affected by a cyberattack?
Has your organization been affected by a cyberattack? Then contact the National Cyber Security Centre (opens in new tab).
To make your organization digitally resilient, it is important to focus on both prevention and recovery. It is not a matter of 'doing it once and then being done,' but cybersecurity is constantly evolving.
Frequently Asked Questions
What is cybersecurity for a cultural organization?
Hide explanationShow explanation
What is cybersecurity for a cultural organization?
Cybersecurity means that your organization is prepared for digital threats, such as phishing, data breaches, and ransomware. For museums, theaters, festivals, and heritage houses, it involves protecting collections, audience data, and daily operations. It is not a one-time action but an ongoing process: you identify risks, take measures, and practice what to do if something goes wrong. Start with the CyberSafety Check to see where you currently stand.
Is cybersecurity only a task for the IT department?
Hide explanationShow explanation
Is cybersecurity only a task for the IT department?
No, cybersecurity is a task for the entire organization, not just IT. Employees who recognize phishing emails, use strong passwords, and know who to notify in case of an incident are just as important as technical security. Ensure that cybersecurity becomes a regular topic in team meetings and that everyone knows their role in the face of a digital threat.
What does a cyberattack cost a cultural organization?
Hide explanationShow explanation
What does a cyberattack cost a cultural organization?
The costs vary greatly per incident but are often higher than expected: think of ticket sales outages, halted productions, data recovery, and sometimes ransom payments for ransomware. Research by DEN in 2023 shows that three out of ten cultural organizations experienced a cyber incident in the three years prior. In addition to direct costs, reputational damage and loss of trust among visitors and donors also play a role.
Where do I start if I haven't done anything about cybersecurity yet?
Hide explanationShow explanation
Where do I start if I haven't done anything about cybersecurity yet?
Start with the CyberSafety Check, a free online tool that gives you insight into your current digital status in a short time. You receive a concrete action list with quick wins to improve your basic security today. Want to continue structurally afterward? Work with the Cybersecurity Step-by-Step Plan or sign up for the online workshop on cybersecurity in the cultural sector.
