Information security that healthcare can rely on
Patient records need more than a good firewall. We design your IT environment so that you demonstrably meet NEN 7510, without adding extra steps for care professionals.
3 years
Validity of a certificate
8 themes
Control areas within the standard
100%
Demonstrable evidence during an audit
What does NEN 7510 actually require?
NEN 7510 is the Dutch standard for information security in healthcare and builds on ISO 27001. It translates general security into daily care practice: who may open a record, how is access revoked, and what happens after a data breach?
The standard covers the whole system: technology, processes and behaviour. A supplier that only installs antivirus software will not pass. You need policy, assigned responsibilities and evidence that controls work in daily practice.
Who is the standard meant for?
Every organisation that processes personal data in healthcare deals with NEN 7510, from a GP practice to a laboratory and its suppliers.
- Hospitals and clinics
- General practitioners and health centres
- Mental health and disability care
- Laboratories and pharmacies
- Health insurers and chain partners
- IT suppliers with access to care data
What we build for you
We translate the standard into concrete controls that fit your environment and that you can evidence during an audit.
Access and identity
- Role-based access to patient records
- Two-factor authentication for staff
- Joiner, mover and leaver process
Data protection
- Encryption of data and backups
- Segmented networks and logging
- Management of mobile devices
Procedures and evidence
- Incident and breach procedure
- Periodic risk assessment
- Documentation for certification
From baseline to certificate
A healthcare programme involves many stakeholders. We work in clear steps so that care teams and IT never get in each other's way.
Quick scan
We assess the current environment and name the risks that need attention right away.
Action plan
Together we set priorities, owners and a realistic schedule per department.
Build and train
We implement controls and train staff in working safely with patient records.
Audit support
We deliver the documentation and guide the assessment by a certification body.
Make your care data provably safe
Take the free IT check or book a conversation. We tell you honestly what needs to happen and what it costs.
No obligation · response within one business day · healthcare experience