Skip to the content
ABRO

Security at the level central government requires

The ABRO sets requirements for protecting classified information. We configure the environment, separate confidential flows and make sure access stays demonstrably limited.

Secured workspace with access control and encrypted connections in a government office

3 levels

Classification of information

Need to know

Access as the starting point

AIVD

Frameworks for state secrets

The basics

What the ABRO covers

The General Security Guidelines for Central Government describe how government bodies handle classified information. They determine how information is classified, who is granted access and which cryptography is permitted.

In practice this means strict separation between information flows, logging of every access and clear agreements with suppliers. We make sure those requirements are built into the technology, not just written down.

Who do the guidelines apply to?

The ABRO applies to central government bodies and to parties that work with classified information on their behalf.

  • Ministries and national services
  • Agencies handling state secrets
  • Defence and security services
  • Suppliers with classified data
  • Partners with access to government systems
  • Data centres for government housing
Check it with a specialist

What we work on

We translate the guidelines into a workable design without sacrificing usability altogether.

01

Classification

  • Classification of information flows
  • Separation per classification level
  • Documented ownership
02

Access and crypto

  • Need-to-know access model
  • Approved cryptography
  • Logging and access review
03

Incidents and suppliers

  • Incident reporting procedure
  • Assessment of suppliers
  • Periodic re-assessment

How we run an ABRO programme

We work closely with your security officer and document every step, so the assessment holds no surprises.

01

Analysis

We determine which information flows are classified and which requirements apply to them.

02

Design

We design a separated environment with appropriate access and cryptography.

03

Build

We build the environment, set up logging and test the separation between flows.

04

Assessment and upkeep

We support the assessment and keep the design current when things change.

Manage classified information safely

Start with the free IT check or book a conversation with a specialist in government security.

No obligation · response within one business day · treated confidentially