Audit and Assurance

Assurance Audits are professional assessment services in which audits are performed in accordance with internationally accepted auditing standards for assurance, such as ISAE 3000, ISAE 3402 and SOC2.

The Government Information Security Baseline is a replacement of standards frameworks such as BIR, BIG, IBI and BIWA and is applicable within all government organizations and companies involved. BIO is based on internationally accepted standards and best practices such as ISO 27001 and ISO 27002. Read more here.

DigiD is used to identify and authenticate nearly 14 million citizens to government, healthcare and even other organizations' web applications. The government takes many measures in securing DigiD, including an annual audit by an RE (Registered EDP Auditor).

Municipalities hold a lot of citizen data. In addition to BIO compliance and the annual DigiD audit, they must also comply with ENSIA & SUWINET.

Hospitals and medical institutions hold a lot of personal data. The Accelerated Patient and Professional Information Exchange Program (VIPP) has as its goal that hospitals in the Netherlands make a digitization effort to make care safer, more patient-centric and efficient.

Hospitals have information security high on the agenda. The Dutch Association of Hospitals (NVZ) and the Dutch Federation of University Medical Centers (NFU) want to achieve a sector-wide quality improvement to at least the level of the NEN 7510 standard.