What is NEN 7510?
For healthcare institutions, the security of patient data is often an important item. To demonstrate that you have managed to reduce the identifiable risks to a minimum, you can choose to be certified in accordance with NEN 7510.
â
Certification is only possible for the NEN 7510 standard. NEN 7512 and NEN 7513 are not certifiable. Indeed, these two standards contain additions and effects that are used for NEN 7510.
â
NEN 7510 certification is not exclusively reserved for healthcare institutions. Suppliers to healthcare organizations can also opt for certification. In many cases, they also have to deal with the processing of privacy-sensitive information. This can include patient data, for example, but also financial data. In the latter case, you can also opt for another certification, namely ISO 27001.
Which organizations can issue a certificate?
Like all other certifications, a NEN certificate can only be awarded by an accredited institution. Prior to the final certification, this institution will provide the management system for information security test against the conditions associated with NEN 7510.
â
This review takes place under the supervision of the Accreditation Council. On the NEN.nl website, you can see which institutions have the appropriate accreditation. In any case, the institution responsible for certification must not be associated in any way with the organization that is applying for the certification.
â
The testing by the certifying body takes place in accordance with NTA 7515 âConformity Assessmentâ. These are the ârequirements for institutions that carry out audits for the certification of information security management systems in healthcareâ. This assessment framework ensures uniformity so that each certification retains its value. In 2016, NTA 7515 was completely revised.
Managing and monitoring NEN 7510
Management System
Why a digital management system for NEN 7510?
Many organizations have already switched from a âhandbook in the closetâ to an environment such as SharePoint or a Document Management System to also be able to view their documentation remotely.
But then these questions and sources of stress linger:
- How do I become aware of the importance of information security policy?
- How do I control the planning so that my ISMS continues to meet the requirements and objectives?
- How are adjustments planned and managed?
- How do I control the quality of the processes such as outsourcing, etc.?
- How do you clearly and easily evaluate the results of the information security?
- How do you easily run your RIE at the right intervals?
- What measures still need to be implemented for risk management of information security?
- How construction am I simply bearing the burden of proof of the various registrations?
ISO2 HANDLE
Why ISO2HANDLE's management system?
because ISO2 HANDLE tracks, chases and maps everything for you, giving you control and overview and continuously managing the certification in the background.
Our platform helps with all the activities associated with obtaining and maintaining certifications, in all phases from implementation to optimization:
â
Deploy:
- âUse our NEN 7510 template and customize with the drag & drop editor
- Personalize forms
- Apply workflow schedules so that registrations are automatically forwarded to the right colleague
Adopt:
- Handbook and forms are also accessible via mobile
- Automatic task management keeps track of all pending actions in a clear dashboard
Monitors:
- Dashboards in the blink of an eye with trend & cost analysis
- Track your KPIs
Optimization & Audits:
- Access for Certification Authorities; decide the components and time limit yourself
- Download and share dashboards and reports
Consultancy firms
Partner network of organizational consulting firms
ISO2 HANDLE works for a large number of certification advice agencies in the Netherlands, each with their own expertise and focus. A consultancy firm helps with the customized implementation and provides substantive advice on how the processes surrounding certification seamlessly fit with your organization and way of working. They can also help switch from your current system to ISO2 HANDLE.
