Zero incidents. Zero sensors. That’s the official record on GPS disruption in Dutch waters – not because it doesn’t happen, but because no one measures. Zero isn’t safety; zero is blindness dressed as reassurance. This is a systemic risk: too broad for any single organisation, too operational for government, too cross-cutting for existing frameworks. Ship handling is critical infrastructure under NIS2, yet GPS reliability sits between all chain partners. Everyone has reason to look away. No one has mandate to act. The Dutch port sector is building a different model. Ferm acts as orchestrator: not owning risks, but ensuring they cannot be ignored. Dynamic coalitions form around threats. Escalation paths lead to ministry level when needed. We use GPS to show how this works. The approach applies wherever risks fall between organisations. We offer a practical alternative to hoping someone else will fix it.
