Be prepared for the annual DigiD Audit

Does your organization use DigiD for the identification and authentication of citizens? Then you have to comply to the mandatory annual inspection by a Register EDP Auditor (RE).

Bureau Veritas Cybersecurity has audit teams with substantive knowledge and experience that can carry out your DigiD Assessments under the guidance of REs. With Bureau Veritas Cybersecurity's wide range of digital security services, all necessary audit work and technical tests on the web applications that use DigiD are in one hand.

How we support you

Bureau Veritas Cybersecurity offers you various services to comply with the mandatory requirements
security guidelines of Logius. These are:

• Pre-Audit DigiD to prepare you optimally for the formal DigiD Assessment.
• The annual audit, to be performed by a Register EDP auditor (RE).
• The technical tests (mandatory in the assessment) on the web applications that use DigiD;
  • Periodic vulnerability scans on the DigiD infrastructure;
  • Periodic tests on the web applications accessed with DigiD;
• A TPM DigiD assessment for third parties involved in the provision of services for the web application that uses DigiD;

These services can be purchased separately or in combination. Especially in the combination of these services will make the impact of the DigiD audit process one for you minimized and you limit the risk of shortcomings that may arise join the formal DigiD assessment. Moreover Bureau Veritas Cybersecurity can also perform the ENSIA and Suwinet audit for you.

Attention: expanded DigiD Audits

The Ministry of the Interior (BZK) has decided that DigiD assessments must also test the 'functioning' of control measures. In this document, we explain what this change entails and what the implications are for your organization.