Our governance impact in 2023

Cyber security 

In 2023, we took further steps in cyber security to ensure the security and reliability of our domain registrations. A list of our initiatives, achievements and collaborations is provided below.  

Cyber security policy 

In 2023, we strengthened our internal cyber security policy by conducting four internal and two external audits on our information security policy and our ISO 27001 certification. All audits were positive and the issues found were resolved. By implementing the audit recommendations, we met the Key Performance Indicators (KPIs) we set ourselves in terms of cyber security. 

Registrant verification  

In the event of suspicious domain name registrations, we perform an additional verification step to make sure there is nothing untoward going on. Both individuals and companies have to go through additional verification steps in the event of suspicious registrations. This is to prevent domains being used for malicious activities such as phishing , malware and domain squatting. In 2022, the online verification process for .be registrations was introduced to allow registrants to easily verify their identity. 

In 2023, this process was extended by enabling verification at our registrars .  
In 2023, we entered into a collaboration with SIDN (Foundation for Internet Domain registration in the Netherlands) to develop AI-driven solutions to detect suspicious domain registrations. This collaboration resulted in advanced software that identifies potential registration fraud, with the aim of creating a safer internet environment for Belgian internet users. 

Statistics for 2023 

Contacts and domains for verification:

• 44,001 contacts selected for extra verification. 
• 49,033 domain names selected for extra verification. 

Verification results: 

• 28,146 contacts successful verified. 
• 31,385 domain names activated after positive verification. 
• 10,584 new domain names registered by verified owners. 

Survey of holders of non-activated registrations  

We conducted a survey of .be-registrants who did not activate their domain name after registration. The purpose of the survey was to gain insight into the reasons behind the non-activation: 

• Lack of specific plans: registrations without immediate plans to use the domain. 
• Unclear communication: uncertainty about the demand for identity verification. 
• Verification process: problems or obstacles during the verification process. 
• Other reasons: other causes for non-activation. 

(Inter)national collaboration for cyber security 

TLD -ISAC 

In 2023, we co-founded TLD-ISAC, an international partnership to improve cyber security through information sharing. Its mission is to promote cyber security and share threat intelligence among TLD managers. Members benefit from valuable analyses, reports, and networking opportunities that strengthen the operational resilience of the domain industry. Our CISO (Chief Information Security Officer) has been appointed as the first chairperson of TLD-ISAC, while our CEO is a member of the Board of Directors.  

Cyber security Coalition 

The Cyber security Coalition is a Belgian partnership between the academic world, the private sector and public authorities with the following objectives: to bolster cyber security through knowledge sharing and collaboration, develop innovative solutions and influence policy-making at a national level. The Coalition is divided into several working groups, each with a specific focus on different cyber security issues. Various colleagues participated in working groups, and our sustainability coordinator became co-chairperson of the 2023 Awareness Working Group. This working group held four plenary sessions and several sub-working groups.  

Combating internet fraud and illegal content 

In 2023, DNS Belgium proactively withdrew 2,697 active domain names, chiefly because they contained incorrect owner information: incorrect or incomplete holder information discovered through our screening and own research. 

Good governance 

Non-profit organisation DNS Belgium was established in 1999 as the manager of .be domain names. DNS Belgium's governance structure is designed to guarantee transparency, responsibility, and effectiveness in its operational and strategic decision-making process.  

In 2023, we laid down governance guidelines in a Corporate Governance Charter which set out the 10 basic principles we follow to guarantee an ethical and transparent governance. These principles comprise aspects such as integrity, responsibility, and the compliance of legal requirements. Our Corporate Governance Charter is available here: Good governance | DNS Belgium  

Organisational structure 

DNS Belgium's governance is structured around various bodies, each with specific roles and responsibilities. A description of our organisational structure is available here: Organisation | DNS Belgium.  

The governing body consists of eleven members; three women and eight men. All members are represented by the founding and full members of DNS Belgium. Members are selected autonomously by the members themselves, with special attention for diversity and inclusion. No conflicts of interest were identified relating to the composition of the governing body. ESG criteria are currently not explicitly included in determining the directors' remuneration. They receive an allowance for expenses as laid down in the articles of association of the non-profit organisation. 

The CEO, Philip Du Bois, is responsible for the day-to-day management of the organisation. He is responsible for the efficiency of the operational activities and is accountable to the governing body. 

Decentralised procurement policy 

DNS Belgium deliberately opted for a decentralised procurement policy, which is a unique aspect of our governance strategy. Instead of a centrally driven procurement system, self-managing teams are given the responsibility to make decisions regarding the purchase of products and services. 

• Decision-making close to users: This approach allows us to bring the decision-making process as close as possible to the teams that actually use the products. This allows us to be more flexible and responsive to the specific needs of our operational teams, increasing efficiency and satisfaction. 
• Sustainability integration: Sustainability aspects play a crucial role in our purchase decisions. We developed the CSR matrix to map the sustainability aspects of decisions. Although the volume of goods purchased is low and the impact relatively small, we underline the importance of sustainability in all our processes, projects and activities. This CSR matrix is a compulsory step in every project to determine its environmental, social and governance impact.  

Value chain 

On this page Our role in the management of the internet | DNS Belgium you can read more about our role in managing the internet, including a history and an overview of our value chain. 

Good relationships with stakeholders 

Strong relationships with stakeholders are essential to achieve DNS Belgium's mission. In 2023, we actively maintained contact with various stakeholders, ranging from employees to international organisations, to achieve our goals of sustainability, cyber security, and digital inclusion.  

Employees  

Our employees are at the heart of our organisation. The CSR committee, which consists of staff members, monitors DNS Belgium's ESG strategy and convened four times in 2023. This committee ensures that corporate social responsibility principles are at the heart of our strategy. The HR committee, which was expanded by three staff members in 2023, meets every fortnight. This meets the indicator of at least four participatory meetings per year.  

Cyber security 

Cyber security is one of our top priorities. We work together with various stakeholders, divided into international (TLD-ISAC, CENTR and ICANN ), national (Cyber Security Coalition), and public bodies (CCB - Safe on Web, BIPT, FPS Economy).  

Digital inclusion and cyber awareness 

To boost digital inclusion and cyber awareness, we work with various partners, including Digital for Youth, the E-inclusion Taskforce, Mediawijs, and Digitall. In 2023, we carried out projects in collaboration with VRT, Ketnet, RTBF, RVO Society, Brightlab, the CCB, the Cybersecurity Coalition, Mediawise, Mediaraven and Libraries Without Borders. These initiatives increase digital literacy and strengthen cyber security in society. 

Registrars and sustainability policy 

Our registrars are another important stakeholder group. They are organised through the Registrar forum and the Belgian Registrar Association (Bereas). Our goal is to meet with them twice a year, which we managed in 2023. The forum met twice, once hybrid and once live in Leuven. Minutes are drawn up and sent to all registrars. VOKA is a crucial stakeholder and partner for our sustainability policy. 

Customer satisfaction 

When people contact our support service we ask them to complete a satisfaction survey. Our aim is a score of 8/10 (for non-registrars) or 8.35/10 (for registrars) or higher. In 2023, the registrars achieved scores of 9.45/10 and non-registrars (8.68/10). The overall score was 9.07/10. 

Memberships 

DNS Belgium plays a prominent role within CENTR, where our CEO was a member of the board in 2023. Our Business Development Manager and CISO contribute to the marketing working group and cybersecurity working group respectively. We actively promote ‘remote participation’ within CENTR to drastically reduce air travel and spread sustainable principles internationally. 

To achieve our objectives and ambitions, DNS Belgium is a member of various federations and associations, including CENTR, ICANN/ccNSO, ICANN/RySG, Geo gTLD , IVZ, VSDC, Beltug, Ripe NCC, Cyber Security Coalition, VOKA, Unizo, Digital For Youth, Leuven Klimaatneutraal 2030, Digitall, DNS-OARC, APWG, Bike to Work, The Shift, to further strengthen our commitment to sustainability and collaboration. 

SDG ambassadorship 

As in previous years, we also submitted a plan for the VOKA Sustainable Business Charter in 2023. We defined a KPI for it, i.e. to achieve a minimum of 10 successful sustainability actions that contribute to the SDGs. 15 actions were submitted for 2023, and we achieved all our goals. One of these actions was a due diligence of our human rights policy. You can read our policy on human rights here. We found no violations in 2023.  

Transparency 

Transparent communication to all target groups is important to us. That is why we draw up an annual general, financial and sustainability report. All annual reports can be found here. Statistical data, such as the number of .be domain names per month, can be found under statistics on our website.  

Operational reliability 

For 2023, the availability target of the registration platform was 99.95% per month; And we met this target every month. You can check the current status of our systems by clicking this link: DNS Belgium Status.