How can we help you?
Type of provider
NEN 7510: find the right partner.
Certification body, consultant, tooling or internal auditor. One request gets you several quotes. That way you always find the best partner and never pay too much. Free and without obligation.
What is NEN 7510?
NEN 7510 is the Dutch standard for information security specifically for the healthcare sector. The standard describes requirements for an Information Security Management System (ISMS) with additional measures relevant to the processing of health information.
NEN 7510 helps you to systematically protect patient data and healthcare information against loss, theft and unauthorized access.
Who is NEN 7510 relevant for?
Healthcare providers, hospitals, GP practices, mental healthcare institutions, and ICT suppliers serving the healthcare sector. You mostly find NEN 7510 in these sectors: healthcare providers, ICT suppliers to healthcare.
Which themes does NEN 7510 cover?
- NEN 7510-1
Requirements for the ISMS. Normative (this is being audited)
- NEN 7510-2
Practice guidelines and explanation. Informative (resource)
- Help with these themes?
A consultant helps you put them in place in your organisation.
Request support
How does the path to NEN 7510 work?
At every step you see which partner can help. Only the internal and the external audit are mandatory.
Mandatory Optional
- Optional
Implement the standard
You set up your organisation according to the requirements of NEN 7510. Implementation support saves time and prevents unnecessary mistakes.
Implementation support - Optional
Maintain your management system
Tooling keeps your documents, risks and actions organised. That also makes it easier for the auditor.
Tooling - Mandatory
Internal audit: the mock exam
To prepare for the external audit, you test whether your management system works. This is often done by an independent expert.
Internal auditor - Mandatory
External audit: the final exam
A certification body assesses whether you meet the standard. It is never the same party that did your internal audit. Pass it and you are certified.
Certification body - Mandatory
Every year again
A management system is not a one-off project. Every year brings an internal audit and a surveillance audit, with recertification after three years. Every year you can reassess your provider, and you can always switch without losing your certificate.
Switch certification body
Why compare quotes through CertificeerWijzer?
For the same standard, the price can differ by up to 75%, depending on the providers you choose. That difference can be explained, because paths differ more than you think: in how much you do yourself and how much you hand over, in the quality of the tooling, in the specialisation of the certification body, in how soon a party can support you and in the certifications of the providers themselves.
So when comparing, do not look at price alone, but also at these factors:
- Price of the whole path Compare the costs over the full three-year cycle, not just the first quote.
- Specialisation in your sector A partner who knows your industry asks the right questions and understands your processes.
- Norms and values Pragmatic or thorough, on site or remote: a partner that fits the way you work.
- Capacity A partner with time when you need it, so your deadline or tender is not at risk.
- International recognition Working with clients abroad? Then the name and reputation of your partners matter.
- Qualifications An accredited certification body, a qualified auditor and a consultant with proven experience, so the result is recognised.
We know the providers personally. We are in direct contact with every connected provider, so we have the most up-to-date information on their prices, specialisations, approach, certifications and availability.
How to get the best partner at a good price
You enter your details once and receive several quotes. Then you choose which party may support your company.
-
“Thanks to CertificeerWijzer we switched to a certification body that fits our organisation much better. We save €1,500 a year and the audits are at least as good.”
Director, FleGo B.V. -
“The switching process went smoothly and professionally. Within 3 weeks we had switched, and the new certification body understands our process approach much better.”
Managing Director, Zeno Zorg B.V. -
“As a start-up founder you already have enough on your plate. Quickly finding the right partner so you can keep building your company is worth its weight in gold. Happy with our certification body and auditor”
Founder, Dufond B.V.
Looking for a provider and not sure where to start?
Get in touch with Nathan, we are happy to help you on your way.
Frequently asked questions about NEN 7510
Is NEN 7510 mandatory?
Working in line with NEN 7510 is a legal requirement for all Dutch healthcare providers (Decree on electronic data processing by healthcare providers). Certification itself is not mandatory, but it is the most common way to demonstrate compliance to supervisors and partners in the care chain.
What is the difference between NEN 7510 and ISO 27001?
NEN 7510 is based on ISO 27001 but contains additional requirements specific to the healthcare sector, such as protecting patient data and medical equipment. ISO 27001 is international, NEN 7510 is Dutch and healthcare-specific. Many organisations combine both standards.
What is the new version NEN 7510:2024?
NEN 7510:2024 was published in December 2024. The standard now aligns better with ISO 27001:2022 and NIS2. Existing certificate holders must transition to the new version before 20 February 2027.
Can I combine NEN 7510 with ISO 27001?
Yes, and that is often efficient. Both standards share the same structure. The certification audit can be combined, which saves time and costs. This is especially relevant for IT service providers that also serve healthcare clients.
Which certification bodies may certify NEN 7510?
Only accredited certification bodies may certify NEN 7510. In the Netherlands, these include Brand Compliance, BSI, DEKRA, DNV, Kiwa, LRQA and TÜV NORD.
What are NEN 7512 and NEN 7513?
NEN 7512 covers secure data exchange between healthcare providers. NEN 7513 sets requirements for logging access to patient records. Both build on NEN 7510 and cannot be certified separately.
