Telefoon: 085-0046560
Mail: info@mathison.nl
Bezoekadres: Cypresbaan 7-9
2908 LT Capelle aan den IJssel
ENSIA audit
An ENSIA audit assesses whether municipalities are complying with the ENSIA guidelines. With this methodology, municipalities account for the status of information security through an integrated audit. This accountability is based on the Baseline Informatiebeveiliging Overheid (BIO).
Responsibility of municipalities
Municipalities are required to account annually for information security. This is done by completing the self-evaluations. By means of a College Declaration on Information Security, the Municipal Executive then indicates the extent to which the control measures are complied with. We realize that this justification, the necessary statements and other required documents can be quite complex.
ENSIA audit
We can perform the ENSIA audit for you and provide the necessary reports and authenticate the documents. On this basis, we issue an assurance report. We are happy to support you with any questions you may have regarding the sometimes complex accountability.
Contact us
if you have any further questions about an ENSIA statement, or did your customers inquire about an assurance statement? or do you want to exchange discourse around possibilities to further improve your processes? we are more than happy to help.
Neccesary security guidelines
As an independent Registered EDP Auditor (RE), we test whether a true and fair view is given of the information security concerning the use of Suwinet, and the DigiD connections. During the ENSIA audit, we conduct an investigation to determine whether the criteria and security guidelines are met. For now, this is limited to relevant requirements from the BIO for Suwinet and the requirements of the NCSC for securing web applications for the DigiD connections.
If you are interested in our approach to ENSIA audits, please inquire about the possibilities via our contact page. We would be happy to help you further.