The Dutch National Coordinator for Security and Counterterrorism (NCTV)

The National Coordinator for Security and Counterterrorism (NCTV) joint-agency programme comprises measures that aim to prevent, protect, pursue and counter potential terrorist threats to national security on the Dutch soil. The presence of a unique organism with functions related to crisis management, counterterrorism, risk assessment and cybersecurity guarantees extraordinary information sharing between the unit and proactive vertical and horizontal coordination. The involvement of all those other actors working in national security outside the government like local authorities, civil society organisations, scholars and private business makes the approach extremely comprehensive and multidisciplinary. Furthermore, specific programmes developed by the NCTV with other agencies as ‘The Netherlands comprehensive action programme to combat jihadism’ and the delivery of periodic reports addressed to government and economic sectors in one side and general public, local authorities and private companies on the other guarantees highly defined knowledge of how behave in certain situations.
The Dutch model plays a key-role within the international arena and it is considered a milestone on comprehensive approaches in security.

The National Coordinator for Security and Counterterrorism (NCTV) protects the country from threats that could disrupt the domestic society.
The NCTV, which is headed at the Dutch Ministry of Security and Justice, aims at being a hub for the security community and all those actors involved on the process. The joint-strategy brings together partners working in security prevention and response within the government, the research institutions, civil society organisations and private businesses in order to provide a united initiative and a sharing of knowledge, operational resources and expertise focusing on preventing and minimising social disruption.
Its main duties are:
• identifying, interpreting, sharing, assessing (minimal, substantial or critical) and reducing threats and vulnerabilities;
• boosting the resilience of vital sectors, structures and networks;
• the surveillance and protection of individuals, objects, agencies, events and vital sectors;
• crisis management, coordination and communication;
• ensuring cyber security;
• support international cooperation (EU, UN, NATO and OECD)
The configuration of NCTV:
The organisation has a staff of around 300 and, in addition to the Office of the National Coordinator for Security and Counterterrorism (NCSC), comprises 5 policy departments – Analysis and Strategy Department (DAS), Counterterrorism Department (DCT), Cybersecurity Department (DSC), Resilience Department (DW), Surveillance, Protection and Civil Aviation Security Department (DB3) -, the National Crisis Centre (NCC) and the National Operations Coordination Centre (LOCC).
In the event of a supraregional or national crisis the NCC acts as a nerve centre for all crisis management operations with the support of the LOCC. While the former coordinates the authorities’ efforts and the decision-making process at central government level and ensures both the public and the authorities concerned are kept properly informed, the latter works on the operation side coordinating the actions necessary to bring the crisis under control. If the crisis occurs at the local or regional level on the other hands is generally handled by regional or local authorities (veiligheidsregios) with the support of the NCC on providing them reliable information and advice.
The National Cyber Security Centre (NCSC) functions as the nexus in the digital security network. The NCSC brings together know-how and expertise, provides assistance in the event of threats and incidents, and acts as the operational linchpin during a major crisis.
The Analysis and Strategy Department (DAS) has at all times the most complete and up-to-date overview possible of all threats and risks to national security. This enables it to supply timely, high-quality threat related products (such as threat and risk analyses, scenarios and studies). It works and consults with other parties within and outside the organisation, providing a solid information basis for the NCTV’s work. DAS produces short, medium and long-term analyses.
The Counterterrorism Department (DCT) responds to the current developments on counterterrorism. The Department is within the government the unmistakeable point of contact for jihadism. And works together in close contact with the of Ministry of Social Affairs and Employment to carry out ‘The Netherlands comprehensive action programme to combat jihadism’. This action programme is a comprehensive one and has three objectives: to protect democracy and the rule of law, to combat and weaken the jihadist movement in the Netherlands and to remove the breeding ground for radicalisation.
The NCTV’s Crisis Management and Safety Regions Department (DVCB), which comprises two divisions, is aimed at preventing social disruption. Its focus is on averting danger, making society more resistant, minimising the impact of threats and incidents and repairing damage.
The LOCC falls under the NCTV’s authority and is managed by the National Police. The LOCC is part of the national crisis decision-making infrastructure and is responsible for the multidisciplinary National Operational Overview and providing operational advice in the event of national and international incidents, crisis situations, disasters and major public events
The Surveillance, Protection and Civil Aviation Security Department - known as DB3 - manages the surveillance, protection and civil aviation security system as well as the system for deploying special units (DSI), the Renegade procedure (for providing military assistance to protect Dutch air space) and the Counterterrorism Alert System (ATb). The tasks of DB3’s Policy Division include helping to develop national and international legislation, parliamentary matters, security plans, national and international policy development, technical developments and security concepts. The Operations Division coordinates operational matters such as the ATb, deployment of the DSI, specific surveillance and protection assignments and programmes aimed at protecting members of the Royal House, politicians and members of the government. The department also has a Quality Assurance Division tasked with evaluating policy and providing internal quality assurance.
NCTV organises as well training sessions and exercises to raise awareness of security within organisations and the private sector. For example, by means of ‘red teaming’, in which groups of experts rigorously test out an organisation’s security measures.

NCTV is a coordination body in charge of the national strategy on counterterrorism, cyber security, domestic security and crisis management. The involvement of actors belonging to different fields – central government, private business, civil society organisations, local and regional authorities, researchers guarantees an expertise and knowledge sharing among the several actors and agencies involved.
In terms of specific mechanisms, the existence of trainings for CSOs and private business ensures sustainability in the long term.

Has NCTV brings together all those actors and agencies working on national security order to coordinate and support information and knowledge sharing.
Although the national strategy has been tailored according to the needs of the Netherlands, both the concept of a multi-agency coordination centre and the areas of practice can be easily transferred to other similar scenarios, both an international and national.

The Ministry of Security and Justice and the Minister of Social Affairs and Employment compiles periodic reports/letters for the House of Representatives. Simultaneously the NCTV publishes the quarterly Terrorist Threat Assessment for the Netherlands (DTN) and the Counterterrorism Alert System (Atb).
The Terrorist Threat Assessment Netherlands (DTN) determines the general threat level for the Netherlands on the basis of a wide range of intelligence. It does not deal with specific locations or times but with the question: how great is the risk – in general – that a terrorist attack will be carried out against the Netherlands? This risk can be minimal, limited, significant, substantial or critical. Because the assessment is so general, no security measures are taken on the basis of the DTN alone. It therefore primarily has an impact on the government’s anti-terrorist policies, for example by encouraging the government to focus on preventing radicalisation processes or on the role of women in terrorist networks. It is addressed to local authorities, general public and companies.
While, the Counterterrorism Alert System was developed to look more specifically at the threat level within certain key areas or economic sectors. In contrast to the DTN, the Counterterrorism Alert System is a special alert system for the government and the corporate sector. On the basis of this system, they can quickly take security measures in response to a heightened threat in a particular sector. A sector can be at any one of four levels: basic, low, moderate or high. It is addressed to the government and certain economic sectors.

Internal Cooperation among the relevant government agencies, local and regional authorities, research institutions, civil society organisations and private businesses.
External cooperation between the NCTV agency and other EU States, EU Agencies and NATO, UN, OSCE and OECD states.

For year 2017, the annual budget is of € 221 million.
For the years 2017-2021 the draft budget includes € 5.5 billion of expenditure, € 5.5 billion of commitments and € 5.4 billion in revenue.

M. R. Haberfeld, J. F. King and C. A. Lieberman, Terrorism Within Comparative International Context, Springer (2009) pp.63 – 67.
National Coordinator for Security and Counterterrorism, Ministry of Security and Justice, NCTV Brochure 2014. Available at https://english.nctv.nl/binaries/nctv-brochure-2014-en-lores-spreads_tcm32-84088.pdf [accessed 28/07/2017].
National Coordinator for Security and Counterterrorism, Who is the NCTV. Available at https://english.nctv.nl/organisation/WhoistheNTCV/index.aspx [accessed 28/07/2017].
National Coordinator for Security and Counterterrorism, NCTV Annual Plan 2016. Available at https://english.nctv.nl/binaries/nctv-annual-plan2016-def_tcm32-84228.pdf [accessed 28/07/2017].
National Coordinator for Security and Counterterrorism, National Counterterrorism Strategy 2016-2020. Available at https://english.nctv.nl/binaries/LR_100495_rapportage_EN_V3_tcm32-251878.pdf [accessed 28/07/2017].

https://english.nctv.nl/binaries/nctv-brochure-2014-en-lores-spreads_tcm32-84088.pdf
https://english.nctv.nl/organisation/WhoistheNTCV/index.aspx
https://english.nctv.nl/binaries/nctv-annual-plan2016-def_tcm32-84228.pdf
https://english.nctv.nl/binaries/LR_100495_rapportage_EN_V3_tcm32-251878.pdf

The joint-agency programme comprises measures that aim to prevent, protect, pursue and counter potential terrorist threats to national security on the Dutch soil. The presence of a unique organism with functions related to crisis management, counterterrorism, risk assessment and cybersecurity guarantees extraordinary information sharing between the unit and proactive vertical and horizontal coordination. The involvement of all those other actors working in national security outside the government like local authorities, civil society organisations, scholars and private business makes the approach extremely comprehensive and multidisciplinary. Furthermore, specific programmes developed by the NCTV with other agencies as ‘The Netherlands comprehensive action programme to combat jihadism’ and the delivery of periodic reports addressed to government and economic sectors in one side and general public, local authorities and private companies on the other guarantees highly defined knowledge of how behave in certain situations.
The Dutch model plays a key-role within the international arena and it is considered a milestone on comprehensive approaches in security.

The central aim of NCTV is to ensure coordination and joint-strategies.
The hub brings together the security community and all those actors involved on the process as the government at the national and local level, the research institutions, civil society organisations and private businesses which are trained and coordinated by an unique body.
With regards to the area of intervention the mechanism is in charge of crisis management, counterterrorism, cyber security and risks analysis. Due to the large and specialised capability of the body, the NCTV is able to customize the type of approach needed for that particular situation. And tailor the reaction according to the needs of all those specific actors involved. Moreover, the presence of periodic trainings that private business and civil society organisations involved in the security process receive, combined with a customised programme for combating Jihadism, and the constant production of strategic, operational and evaluation reports to both the public and the government make the approach as one of the most comprehensive and multi-functional on the field.
Considering the approach as a whole, the large and different number of security actors involved and the spectrum of initiatives that the NCTV takes into account it can be assessed that the strategy provides extremely high effectiveness.

The performance of NCTV form 2011-2015 was evaluated in 2016; five trends were identified as having a negative effect on the authorities’ intervention capability:
1. The strategy’s broad outlook can unintentionally create the conditions for selective attention.
2. Social partners and security partners tend to drift apart, particularly at times when the threat is deemed a less urgent priority.
3. When the threat is less evident, the national partners’ capabilities fluctuate strongly.
4. The integrated local approach is a potentially powerful tool, but the capabilities of local partners are also prone to fluctuate.
5. The parties value the coordinating role played by the NCTV, but the need for the NCTV to mediate and sometimes choose between political and implementation interests is a recurring issue.
The evaluation showed that, when the terrorist threat was low, the authorities’ intervention capability fluctuated in terms of efficiency and legitimacy. Once the threat level was raised in March 2013, the authorities’ intervention capability did increase, however. By late 2015, efficiency and legitimacy were back at adequate levels. Between 2011 and 2015, the authorities’ intervention capability could have been more robust.
These five trends have then been incorporated into the strategic principles set for 2016-2020. Cohesion between policy and implementation, and close cooperation and information-sharing between local, national and international partners prevents selective attention and keeps social partners and security partners from drifting apart. Therefore, the new strategy keens to further strengthen multidisciplinary cooperation and information-sharing, both within and among local, national and international partner organisations. Although the system of institutions is complex, their powers and responsibilities often complement each other. This complexity is exactly why there needs to be coherence between the various chains of command, responsibilities and interests in play. The strategy cannot be implemented without subnational authorities, particularly in relation to social policy with the potential to prevent extremism and terrorism. These authorities must be able to make their own policy decisions. This is why a ‘top-down’ command structure has been rejected in favour of horizontal coordination, which strengthens the impact of the integrated local approach. As counterterrorism is a prime example of a dynamic policy area, it is vital that subnational partners.
Considering the continuous assessment, the review of performance and the production of high-quality analysis reports leading to an improvement of the strategy. Considering as well the coherence between the indicators, their assessment and the review of the approach, the NCTV mechanism is the example of how dynamic policy show to be the most efficient.

The impact of the strategy is extremely high. The multi-agency approach on dealing with counterterrorism, cyber security and crisis management together with a strong horizontal coordination and knowledge sharing of the security agencies and operational application at the low level ensures a prompt and tailored intervention according to the needs.
As the strategy doesn’t cover only the enforcement approaches, but as well preventive measures related to social policy, it makes the NCTV mechanism and the Dutch approach in general as one of the most comprehensive and with extremely positive results.

The sustainability of the practice is enhanced by its ability to transmit promptly horizontal coordination, which strengthens the impact of the integrated local approach.
The joint-body allows to transfer skills and knowledge to the diverse actors who are or might be involved with the arisen situation and potential threat.
Due to its expertise, comprehensiveness, efficiency and effectiveness the NCTV is considered as a milestone practice in Europe. The combination of preventive approaches, protective responses, preparation and training of the actors (as well private sector and civil society), the threat reduction strategy and the robust horizontal coordination make the mechanism extremely productive.
On the other hands, when thinking about transferability of the practice in other contexts, it has to be taken into account that although the population density in the Netherlands is extremely high comparing to the other EU countries, the territory is very small and the number of inhabitants as well. Same consideration can be made for the financial capabilities of the country and the access to excellent technology. Therefore, although the NCTV is a milestone for the EU security strategies, it would be advised in case of transferability to other contexts to consider the societal, cultural, economic and political context of the area.

The strategy is at its core designed by the Ministry of Security and Justice, and the Ministry of Social Affairs and Employment and implemented by the National Coordinator for Security and Counterterrorism in the Netherlands.
However, this programme takes a holistic approach aiming to be a hub for the security community and all those actors involved on the process.
The joint-strategy brings together partners working in security prevention and response within the government, the research institutions, civil society organisations and private businesses in order to provide a united initiative and a sharing of knowledge, operational resources and expertise focusing on preventing and minimising social disruption.
It involves as well the public society and the economic sector through the delivery of periodic reports aimed at prepare the whole Dutch society.