Ready for the NBIV inspection.
ABRO 2026 places security obligations on suppliers to the Dutch Ministry of Defence. NormControl brings the full standard, your registers and your evidence into one system, in your own Azure environment.
The obligation in brief
Companies working on Dutch defence contracts involving protected interests must comply with ABRO 2026: a concrete set of security requirements, from screening and physical security to ICT resources and incident reporting. The NBIV verifies compliance through inspections. Requirements differ per contract type; you demonstrate compliance per requirement.
What NormControl covers for ABRO
Plus ISO 27001, as a side effect
Most ABRO-affected companies also need ISO 27001. Through cross-mapping, one system serves both standards: shared requirements are satisfied once, with one piece of evidence. See the standard modules.
Sovereignty is not a nicety here
For this audience, "your data stays in your own Azure subscription and the vendor has no access" is a requirement, not a perk. NormControl is built that way. Read the full architecture story.
Delivery normally runs through the Azure Marketplace. Self-managed or fully air-gapped deployment is possible too: get in touch.