The advent of the European directive NIS2 brings new requirements for cybersecurity and resilience of essential services in EU member states. As healthcare has been characterised as a \u2018highly critical sector\u2019, new requirements for cybersecurity within healthcare facilities and hospitals\u00b9 also follow from this. While many organisations are already familiar with NEN 7510, the step to full NIS2 compliance is challenging and necessary. In this blog, we discuss five crucial steps to prepare your institution for NIS2.<\/p>\n
\u00b9 These requirements particularly apply to government institutions and companies that are essential to the economy and society. There are also specific criteria that take into account size and impact, such as organisation size > 250 employees or annual turnover > \u20ac50 million and balance sheet total of > \u20ac43 million (source: NCTV, https:\/\/www.nctv.nl\/onderwerpen\/cer–en-nis2-richtlijnen\/wat-zijn-de-sectoren-en-criteria-die-bepalen-of-een-organisatie-onder-de-nis2-richtlijn-valt)<\/em><\/p>\n <\/p>\n NEN 7510<\/strong> is a Dutch standard that focuses on information security in healthcare. It provides guidelines for securing patient data and other sensitive information. However, NIS2<\/strong> is a broader European directive that goes beyond NEN 7510 and aims to make organisations that are considered critical (such as healthcare institutions) more resilient to cyber threats.<\/p>\n While NEN 7510 provides a solid foundation, certification is not enough to fully comply with the requirements of NIS2. For full NIS2 compliance, healthcare institutions need to expand their measures to meet the additional requirements. It is therefore essential to understand and implement the differences and overlaps between the two standards.<\/p>\n <\/p>\n NEN 7510 does provide an excellent starting point on the road to NIS2 compliance. The standards framework includes:<\/p>\n Certification according to NEN 7510 helps your organisation build a solid foundation. Given the expected update of NEN 7510 due to NIS2, it is important to keep this certification in order and proactively keep abreast of the latest developments within the standard.<\/p>\n <\/p>\n In addition to the basic requirements of NEN 7510, NIS2 calls for strengthened security measures:<\/p>\n Being prepared for cyber incidents is a core component of NIS2 compliance. An effective incident response plan includes:<\/p>\n1. Understand the difference between NEN 7510 and NIS2<\/h2>\n
2. Conduct a risk analysis and work towards NEN 7510 certification<\/h2>\n
\n
3. Strengthen Security Measures<\/h2>\n
\n
<\/h2>\n
4. Establish an Incident Response Plan<\/h2>\n