From the very first contact with this organisation, it was buzzing with energy and commitment regarding information security. Like no other, this organisation realises that caring about the data they process is an important responsibility. Together with DigiTrust, they entered the certification process and successfully. Anders Medical Factoring is NEN7510 certified (under accreditation by the RvA) DigiTrust, for both healthcare and service providers, has received the RvA's confidence that we perform this type of audit well. Together with the organisation, we looked closely at the operation of the management system and the status of all control measures. This has thus led to certification.
Source Website Anders Medical Factoring
As a factoring company, how can you visibly show that you handle healthcare and patient data carefully and correctly? That's what the standard 'NEN 7510 (Medical Informatics - Information Security in Healthcare)' is for. Anders Medical Factoring obtained the certificate for this standard in March 2021. We are happy to explain what obtaining this certificate means for our services.
Anders Medical Factoring processes a lot of information. Of course, the patient data on invoices, but also all the information we receive from care providers in the claim files, such as medical and insured data of patients and financial data of care providers and patients. We think it is very important to show patients and our relations that we handle all this data with great care and attention to information security. We have therefore had ourselves audited against the NEN 7510 standard. The focus of the certification: ''Securing information related to taking care of the billing process, managing debtors and taking over the debtor risk for oral care providers in the Netherlands and conducting the functional management of the ICT solutions deployed by AndersMF for this purpose.' This means that the scope of information security covers all our processes.
By obtaining the certificate, Anders Medical Factoring demonstrates that the risks surrounding the processing of data (and patient data in particular) have been reduced by security measures. The implementation process took about six months. The certificate is a starting point; as with any quality management system, information security management is also about continuous improvement. We will obviously follow developments in the ICT field closely.
NEN keeps a record of certificates issued. The certificate has a validity period of three years. Interim assessments are also carried out within this period. Extra attention is paid to standards NEN 7512 (Data exchange) and NEN 7513 (Logging). These standards are elaborations of and additions to NEN 7510. The focus on electronic data exchange in particular is in line with Anders Medical Factoring's desire to develop further in this area.
