DigiTrust is the first Dutch certification body to be trusted by the Dutch Accreditation Council to provide healthcare providers and IT suppliers with the most up-to-date version of the NEN 7510 standard, published in 2017, to be audited as well as certified under accreditation.
De NEN 7510-1:2017 norm moet bijdragen aan adequate informatiebeveiliging en de bewaking van privacy in de zorgsector. Het belang daarvan is de afgelopen tijd meermaals duidelijk geworden door diverse nieuwsberichten over datalekken bij zorginstellingen. Die datalekken ontstaan onder meer door gebrek aan bewustzijn bij medewerkers, niet tijdig updaten van software, gebruik van slechte wachtwoorden en onvoldoende fysieke beveiliging. Een goed information security managementsysteem (ISMS) kan die risico’s afvangen, door dit op orde te brengen. De NEN 7510-1:2017 norm beschrijft hoe zo’n systeem eruit moet zien.
Demonstrate compliance with NEN 7510-1:2017
Minister Bruins for Medical Care and Sport recently stressed the importance of adequate information security and monitoring of privacy. He therefore made it mandatory in the Electronic Data Processing Healthcare Providers Decree that all healthcare providers and their IT suppliers demonstrably comply with the NEN 7510-1:2017 standard. The Healthcare and Youth Inspectorate (IGJ) checks whether these organisations actually comply with this requirement. The Inspectorate views a NEN 7510-1:2017 certificate issued by an accredited body as proof that the organisation demonstrably complies with the requirements of the Electronic Data Processing Decree for Healthcare Providers.
DigiTrust is now the first in the Netherlands to be able to audit and certify against the NEN 7510-1:2017 standard under accreditation. DigiTrust has in-depth experience in the IT market, both on the side of Healthcare institutions and IT service providers. The need for certification within healthcare and the IT providers involved is great. Healthcare providers want certainty in a rapidly changing world.
MEDMIJ
With the accreditation, DigiTrust not only meets the requirements of NEN, but also those of MEDMIJ. Indeed, the NEN 7510-1:2017 certification, issued by a competent body, is also mandatory within the accession process for healthcare providers and IT suppliers for the sake of the upcoming Personal Health Environments. DigiTrust is the first to meet all the requirements set by MEDMIJ and NEN by achieving this accreditation. DigiTrust is an experienced MEDMIJ partner for performing the 'Additional audit statement and substantiation report' within the accession process.