ENSIA AND Suwinet Audits.

Municipalities in the Netherlands have a great responsibility when it comes to general information security. Municipalities are responsible for taking adequate security measures in accordance with the Baseline Information Security Government (BIO). In addition to DigiD, there are two types of accountability reports for municipalities in the Netherlands: ENSIA and Suwinet.

ENSIA AUDIT

ENSIA helps municipalities with accountability reporting. ENSIA stands for Eenduidige Normatiek Single Information Audit and requires one-time provision of information and a one-time IT audit. ENSIA aims to further professionalize the accountability process for information security at municipalities by bundling oversight and linking it to the Planning & Control cycle. ENSIA aims for an information security system that is effectively and efficiently set up.

Suwinet

Suwinet is a digital infrastructure developed by and ensures that the Suwi parties (UWV, SVB and municipalities) can exchange data with each other for the performance of their statutory duties. As a user of Suwinet, a municipality is required to have an annual audit performed based on the contract with the UWV. This can only be done by a qualified RE auditor.

HOW WE SUPPORT YOU

Bureau Veritas Cybersecurity has extensive expertise in the areas of DigiD, ENSIA and Suwinet. Our service includes:

• A pre-Audit for ENSIA and Suwinet to best prepare you.
• The annual audit for ENSIA and Suwinet. The audit is performed by qualified RE auditors in accordance with NOREA Guideline 3000.

These services can be purchased separately or in combination with each other and with DigiD.