Some contracts are accompanied by security risks. This depends on the type of product or service, the client and the company to which the contract is awarded. For example, depending on these factors, there may be a risk that high-value or sensitive knowledge and information will be leaked, that vital business processes will be disrupted or that strategic dependencies will arise. Examples include the outsourcing of digital infrastructure, cloud services and software or the replacement of systems that are used to store large amounts of personal data. In addition, some procurement assignments require physical access to sensitive locations, where it is appropriate to take protective measures.
When contracting out, it is therefore important to start by identifying the presence of any such risks. The National Security Quick Scan for Procurement and Contracting, developed by the Dutch central government, can help to identify risks in procurement and contracting. If the results of the quick scan indicate possible risks, a risk analysis must be performed. The findings can be used to take measures to mitigate risks.