Telefoon: 085-0046560
Mail: info@mathison.nl
Bezoekadres: Cypresbaan 7-9
2908 LT Capelle aan den IJssel
NEN 7510
Within the healthcare sector, a great deal of work is done with sensitive information. Therefore, Dutch companies that work with sensitive healthcare data must obtain NEN7510 certification. This standard is based on the international ISO 27001 standard and is included in Article 2 of the General Administrative Order (AMvB) of the Act governing the use of the Citizen Service Number (BSN) in healthcare.
What is NEN 7510 Certification?
Dutch healthcare specifically also has unique characteristics compared to healthcare systems in other countries. The NEN7510 standard, specifically focused on information security within the healthcare and social welfare sector, contributes significantly to this context.
To provide patients with the desired services, it is essential that healthcare providers can always rely on accurate information. At the same time, it is crucial to ensure that confidential data does not fall into the hands of unauthorized parties, thus protecting patient privacy.
Ensuring information security within the healthcare sector is a complex issue. An extensive network of healthcare providers, patients, health insurers, government agencies, and other stakeholders are involved in the collection, storage, processing, and transfer of information.
Contact us
Do you have questions about a NEN 7510 audit, or have your customers requested an assurance statement? Or would you like to discuss the possibilities for improving the control of your own processes? We would be happy to discuss the possibilities with you.
Advantages of a NEN 7510 Certificate for your organisation
The shared use of information by these diverse parties requires consistent standards in areas such as information storage, message formatting, communication protocols, medical terminology, and coding. Information security also comes into play here. Just as with ISO 27001-certified organizations, NEN7510 supports information security management. In addition to ISO 27001, NEN7510 provides a framework for further security measures in the complex issue of information security within the healthcare sector and for healthcare providers.
Furthermore, the standard offers organisations a significant commercial advantage. Obtaining a certified information security management system demonstrates to both existing and potential customers that the organization is committed to protecting information within the healthcare sector. This contributes to the organization’s commercial value.
What to expect from a NEN 7510 audit
The auditor will assess the organization to determine whether it meets the requirements of the standard and is therefore eligible for NEN 7510 certification.
During an audit, the policy formulation will be examined and whether the policy and associated processes and procedures are being implemented as intended. The auditor will therefore examine which information security requirements are being adhered to, what types of processing are taking place, and what measures are being taken to ensure quality.
Your auditor is therefore a crucial part of your organization’s ability to safeguard information security: This external perspective provides you with an independent assessment of all matters that are properly managed and a clear understanding of those areas that require further improvement
