DigiTrust is the first Dutch certification body to be trusted by the Dutch Accreditation Council to audit and certify healthcare providers and IT suppliers on the most up-to-date version of the NEN 7510 standard, published in 2017, under accreditation.
The NEN 7510-1:2017 standard should contribute to adequate information security and privacy monitoring in the healthcare sector. Its importance has been highlighted several times recently by various news reports about data breaches at healthcare institutions. These data breaches occur partly due to lack of awareness among employees, failure to update software on time, use of bad passwords and insufficient physical security. A good information security management system (ISMS) can mitigate those risks, by putting this in order. The NEN 7510-1:2017 standard describes what such a system should look like.
Demonstrate compliance with NEN 7510-1:2017
Minister Bruins for Medical Care and Sport recently stressed the importance of adequate information security and privacy monitoring in letters to the House of Representatives. He therefore made it mandatory in the Electronic Data Processing Healthcare Providers Decree that all healthcare providers and their IT suppliers demonstrably comply with the NEN 7510-1:2017 standard. The Healthcare and Youth Inspectorate (IGJ) checks whether these organisations actually comply with this requirement. The Inspectorate views a NEN 7510-1:2017 certificate issued by an accredited body as proof that the organisation demonstrably complies with the requirements of the Electronic Data Processing Decree for Healthcare Providers.
DigiTrust is now the first in the Netherlands to be able to audit and certify against the NEN 7510-1:2017 standard under accreditation. DigiTrust has in-depth experience in the IT market, both on the side of Healthcare institutions and IT service providers. The need for certification within healthcare and the IT providers involved is great. Healthcare providers want certainty in a rapidly changing world.
MEDMIJ
With the accreditation, DigiTrust not only meets the requirements of NEN, but also those of MEDMIJ. Indeed, the NEN 7510-1:2017 certification, issued by a competent body, is also mandatory within the accession process for healthcare providers and IT suppliers for the sake of the upcoming Personal Health Environments. DigiTrust is the first to meet all the requirements set by MEDMIJ and NEN by achieving this accreditation. DigiTrust is an experienced MEDMIJ partner for performing the 'Additional audit statement and substantiation report' within the accession process.