View Categories

NEN 7510-2 updated in 2026: what does this mean for you?

0:00 1:48

NEN 7510-2:2024+A1:2026 was published in March 2026. This amended version replaces NEN 7510-2:2024. NEN 7510 is the Dutch standard for information security in healthcare. Part 1 sets out the requirements for an information security management system, while Part 2 describes the associated information security controls.

The amendment follows the revision of ISO 27799:2025, the international standard for information security controls in healthcare. NEN 7510-2 has been updated to align with this standard.

NEN 7510-2

 

Key changes to NEN 7510-2 #

  • Alignment with ISO 27799:2025, including additions to healthcare-specific guidance in sections 5.12, 5.15, 5.16, 5.30, 5.34, 6.3, 6.8 and 6.9.
  • Updates to informative Annexes C, D and E.
  • In Annex E, the reference to the NIS2 Directive has been replaced by references to the Dutch Cyberbeveiligingswet (Cybersecurity Act) and Cyberbeveiligingsbesluit (Cybersecurity Decree), including the corresponding mapping.
  • Updated terminology: the Dutch term “directie” has been replaced by “topmanagement” (top management), in line with NEN-EN-ISO/IEC 27002.
  • The standard’s layout has changed from tables to continuous text.

What does this mean for your NEN 7510-certified organization? #

The standard has been updated, but no new controls have been introduced. The changes mainly consist of clarifications, additions and updates to the guidance.

The healthcare-specific guidance has been refined or expanded in several areas, in line with ISO 27799:2025. Your organization should therefore assess whether existing controls need to be revised or supplemented.

The updated terminology may also require changes to the wording used in your policies and procedures.

Alongside this amendment to Part 2, organizations are transitioning to NEN 7510-1:2024. Has your organization not yet completed this transition? Read more about the transition to NEN 7510-1:2024 and the associated transition audit.

What does this mean for your certificate? #

Brand Compliance certifies organizations against NEN 7510-1. The amendment to NEN 7510-2 therefore has no direct impact on your existing certificate. During an audit, however, auditors may ask how your organization applies NEN 7510-2.

Would you like to learn more about NEN 7510 certification and our audit process? Explore our services or contact us if you have questions about your certification.