DigiD assessment

Requirements for a DigiD integration

An important initial requirement is that the integration must be tested by an independent auditor within two months of the activation of the DigiD connection. This must be done via a DigiD assessment, an ICT security assessment. After the initial activation, the DigiD assessment should be carried out on an annual basis to maintain the integration.

Requirements DigiD auditor for a DigiD audit

Logius has defined requirements for the DigiD auditor: The auditor must be a Registered EDP Auditor (RE), formally registered in the NOREA register.

Mathison auditors have many years of experience conducting DigiD assessments for municipalities (mostly the responsible entity on whose name the DigiD connection is registered), service providers such as software and platform providers. Mathison also has hands-on experience in carrying out DigiD assessments for Representatives of Multiple Connection (Dutch: Leverancier Meervoudige Aansluithouder, or in other words the LMA).

In addition, we maintain close contacts with Logius and NOREA and are therefore directly informed of all relevant developments in the sector and especially the DigiD requirements.

If you are interested in our approach to DigiD assessments, please enquire about the possibilities via our contact page. We will be delighted to help you.