Information security is not just about technology or policy, but especially about demonstrability. Two standards set the direction for this: NEN 7510 and ISO 27001. They are very similar, but differ in purpose, scope, and obligation. NEN 7510 was developed for Dutch healthcare and is explicitly mentioned in the Decree on electronic data processing by healthcare providers. Whoever...
Cybersecurity regulations are changing rapidly. Many organizations are therefore concerned about NIS2, the new European directive that will become mandatory from the end of 2024. It is particularly important for organizations already working according to ISO 27001 to have a clear understanding of the differences and similarities. Both systems have the same goal: better protection of information. But while ISO…
Information security risks pose a growing threat to organizations. A risk analysis according to ISO 27001 helps to make those risks manageable and control them effectively. This process protects your organization and also ensures that you comply with the requirements of ISO 27001. On this page, you will read exactly what an ISO 27001 risk analysis entails. You...
Many organizations face a choice: ISAE 3402, ISO 27001, or perhaps both? Both standards are well-known within information security and are good options. However, they differ significantly in application and goals. ISO 27001 focuses on information security, while ISAE 3402 is geared towards internal controls for service organizations and financial organizations. Which standard is suitable strongly depends on your...
An ISO 27001 certification never comes with a fixed price tag. The total cost depends on various influencing factors. Consider company size, the number of locations, the degree of preparation, and technical complexity. What determines the cost of ISO 27001 certification? The question “how much will this cost?” starts with yourself. How much of the required work...