CCRC
CCRC is a Dutch foundation that delivers cyber crisis training, simulation, and exercise services to enterprises, government, financial institutions, healthcare, and SMEs across the Netherlands, using a proprietary BOB decision-making methodology and a network of senior practitioner-trainers.
- Company typePrivate
- Founded2021
- HeadquartersDen Haag, Netherlands
- Headcount1–10
- GTM typeB2B
- OfferingServices
What CCRC does
CCRC (Cyber Chain Resilience Consortium) is a Dutch Stichting (foundation) headquartered in Den Haag, Netherlands, founded in 2021 by Eric-Jan de Roode and Kelvin Rorive. The organization specializes exclusively in cyber crisis training, simulation, and exercise services, with no security tooling, consulting, or incident response offerings. Its core methodology, the BOB-method (Beeldvorming, Oordeelsvorming, Besluitvorming), is a structured conversation framework that separates situation assessment, interpretation/option analysis, and decision-making to help crisis teams reach decisions under time pressure. CCRC delivers five progressive service tiers — Event, Exercise, Simulation, Program, and Chain — ranging from introductory 1.5-hour interactive sessions to multi-year readiness programs and cross-organizational supply chain exercises (Keten).
The company serves a diverse customer base spanning critical infrastructure, financial services (Rabobank, Robeco, NWB Bank), technology (ASML, SIDN), healthcare (Noordwest Ziekenhuisgroep), government (Gemeente Den Haag, SSC-ONS for six municipalities), education (Kansrijk Onderwijs Enschede), and maritime (Royal Association of Netherlands Shipowners). An SME-focused arm, delivered through partnerships with FME, PVO, and municipalities, extends reach to organizations with limited internal resources. Since founding, CCRC reports 300+ organizations completing its training and 5,000+ knowledge package downloads, with a 9.2/10 average training rating.
CCRC operates as a non-profit foundation rather than a venture-backed company, which shapes its commercial model: pricing is quote-based and not publicly disclosed, programs are structured as multi-year contracts, and a dedicated foundation arm offers reduced rates to organizations with social roles and limited resources. Senior trainers are exclusively practitioners who have served in crisis teams themselves (backgrounds spanning military, banking, police, healthcare CISO roles), and the strategic advisor at the Cyber Innovation Hub of the Ministry of Defence reinforces the firm's positioning at the intersection of public-sector cyber resilience and private-sector capability building. The NIS2 directive is explicitly cited as a regulatory tailwind driving demand for documented, measurable crisis exercises.
CCRC firmographics
Firmographics- Name
- CCRC
- Legal name
- Stichting Cyber Chain Resilience Consortium
- Website
- https://ccrc.nl
- Company type
- Private
- Founded year
- 2021
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Short description
- CCRC is a Dutch foundation that delivers cyber crisis training, simulation, and exercise services to enterprises, government, financial institutions, healthcare, and SMEs across the Netherlands, using a proprietary BOB decision-making methodology and a network of senior practitioner-trainers.
- Ownership category
- akta.pro rank
Where CCRC is headquartered
LocationHeadquarters
- HQ city
- Den Haag
- HQ country
- Netherlands
- HQ region
- Europe
Offices1 record
Markets served
CCRC business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Operations, Marketing or Sales, Others
Revenue model
- Cyber Crisis Training Services: CCRC generates revenue through providing cyber crisis training, simulation, and exercise services. Services are offered at different levels (Event, Exercise, Simulation, Program, Chain) with varying complexity and duration. The foundation arm offers reduced-rate services to organizations with limited resources and social roles.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Other | Multi-year contract | Event - Interactive crisis experience for first-time exposure |
| Other | Multi-year contract | Exercise - Basic cyber crisis exercise |
| Other | Multi-year contract | Simulation - Tailor-made crisis simulation |
| Subscription | Multi-year contract | Program - Ongoing crisis readiness program |
| Other | Multi-year contract | Chain - Supply chain cyber crisis exercises |
Go-to-market motion1 record
Distribution channels6 records
Marketing channels7 records
CCRC product offering
Product offeringCore offering
CCRC provides vendor-independent cyber crisis training, simulation, and exercise services for organizations across five structured tiers: Event (interactive first experience), Exercise (foundational team practice), Simulation (tailored testing of existing plans), Program (multi-year continuous readiness), and Chain (cross-organizational supply chain exercises). Services are delivered directly by senior trainers who have served in actual crisis teams, using proprietary methodologies including the BOB-method for structured crisis decision-making under pressure.
Product overview
CCRC is a consultancy specializing in cyber crisis training and simulation, structured as a foundation. Its core offering consists of five distinct service tiers: Event (interactive first experience), Exercise (foundational team practice), Simulation (tailored testing of existing plans), Program (ongoing multi-year readiness), and Chain (cross-organizational supply chain exercises). These tiers form a progression from initial awareness through to sustained, institutional crisis capability, with the Chain offering uniquely extending preparation beyond the boundaries of a single organization to address supply chain interdependencies.
Differentiator
Problem solved
Functional benefit
Products and services
- Event
- Exercise
- Simulation
- Program
- Chain
Quantifiable outcome
- 300+ organizations have completed CCRC cyber crisis training
- +3 more outcomes
Companies that use CCRC
Customer profileNamed customers15 records
Segments6 records
Ideal customer profiles5 records
CCRC technology and API
TechnologyTechnology focussed No
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration4 records
Feature3 records
CCRC partnerships and signals
Strategic signalPartnerships
Twelve partnerships are on record, tiered core and minor.
- NCSC (National Cyber Security Centrum)coreNCSC is listed as a supporting partner of CCRC, indicating a strategic relationship in the Dutch cybersecurity ecosystem.
- NFIR (Cyber Security Experts)coreNFIR is listed as a supporting partner of CCRC, indicating collaboration in the Dutch cybersecurity community.
- FMEcoreFME collaborates with CCRC to organize recurring cyber exercises for members of the technological industry, twice yearly.
- PVO (Platform Veilig Ondernemen)corePVO partners with CCRC to help small SMEs take first steps in cyber resilience through regional interactive sessions.
- Cyber Veilig NederlandminorListed as a supporting partner of CCRC in the knowledge platform section.
- Cyber Weerbaarheidscentrum BrainportminorListed as a supporting partner of CCRC, operating in the Brainport region.
- APS IT dienstenminorListed as a supporting partner of CCRC.
- Threadstone Cyber SecurityminorListed as a supporting partner of CCRC.
- ArdaminorListed as a supporting partner of CCRC.
- Gemeente Den HaagcoreMunicipality of The Hague partners with CCRC to deliver cyber resilience workshops and exercises for local SMEs, reaching approximately 80 entrepreneurs in October 2025.
- CISAminorCISA (Cybersecurity and Infrastructure Security Agency) is referenced as a source for pre-built tabletop exercise packages that CCRC recommends for scenario inspiration.
- MITRE ATT&CKminorMITRE ATT&CK is referenced as a resource for scenario inspiration and attack pattern analysis in the knowledge platform.
Scale indicators3 records
Recent moves7 records
Expansion highlights6 records
CCRC competitors and assessment
Company assessmentOthers
- Everbridge: Large enterprise crisis management software platform recommended by CCRC for crisis logging; complementary rather than competitive but relevant ecosystem player in the same cyber crisis workflow.
- Business Continuity Institute (BCI): Professional body for business continuity and resilience practitioners, providing standards, training, and certification that overlaps with CCRC's readiness exercise and program offering.
- D4H: Crisis management software platform with real-time collaboration and dashboards, recommended by CCRC; software-complementary vendor rather than direct service competitor.
Broad incumbents
- SANS Institute: Global cybersecurity training organization with deep course catalog and cyber-related exercises; broader in scope but competes with CCRC for cybersecurity training budgets in Europe.
- KPMG (Cyber Risk Services): One of the Big Four advisory firms with a sizable cyber crisis, tabletop exercise, and IR-readiness practice that competes directly with CCRC for the same enterprise and financial-sector buyers.
Direct peers
- S-RM: Global cyber risk consultancy offering cyber incident response, threat intelligence, and cyber crisis simulation exercises, directly comparable to CCRC's cyber crisis exercise and training offerings.
- Sygnia: Cyber consulting firm (part of Team8) that designs and runs cyber crisis simulations and incident response readiness programs for enterprise clients, comparable to CCRC's exercise, simulation, and program service tiers.
- Crisis24 (GardaWorld): Specialized crisis management and response services firm, including cyber crisis advisory and exercises for enterprises, comparable to CCRC's cyber crisis training and simulation focus.
- Control Risks: Global risk consultancy with a substantial crisis management and cyber crisis practice, providing crisis simulation, tabletop exercises, and response training to enterprises - directly comparable in service type to CCRC.
Emerging players
- WithSecure (formerly F-Secure Consulting): Finnish-origin cyber consulting firm offering incident response, cyber crisis simulations, and training to enterprises, comparable in cyber crisis preparedness focus though broader in portfolio.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat4 records
Key risks6 records
Key highlights7 records
Customer concentration
CCRC social profiles
Digital presenceCCRC financial estimates
Financial estimateRevenue estimate
Valuation estimate
CCRC leadership team
Management profileNumber of profiles
Profiles11 records
CCRC funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
CCRC M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about CCRC
What does CCRC do?
CCRC provides vendor-independent cyber crisis training, simulation, and exercise services for organizations across five structured tiers: Event (interactive first experience), Exercise (foundational team practice), Simulation (tailored testing of existing plans), Program (multi-year continuous readiness), and Chain (cross-organizational supply chain exercises). Services are delivered directly by senior trainers who have served in actual crisis teams, using proprietary methodologies including the BOB-method for structured crisis decision-making under pressure.
Is CCRC a public or private company?
CCRC is a private company. It is classified as nonprofit foundation owned and is currently operating.
When was CCRC founded?
CCRC was founded in 2021. It employs 1 to 10 people.
Where is CCRC based?
CCRC is headquartered in Den Haag, Netherlands, in the Europe region.
How does CCRC make money?
One revenue line is on record: cyber Crisis Training Services.
Who are CCRC's main competitors?
Others on record are Everbridge, Business Continuity Institute (BCI) and D4H. Broad incumbents are SANS Institute and KPMG (Cyber Risk Services). Direct peers are S-RM, Sygnia, Crisis24 (GardaWorld) and Control Risks. WithSecure (formerly F-Secure Consulting) is listed as an emerging player.
Does CCRC have an API?
No public API is recorded for CCRC.