{"id":28250,"date":"2026-04-15T08:43:12","date_gmt":"2026-04-15T06:43:12","guid":{"rendered":"https:\/\/brandcompliance.com\/docs\/nen-7510-2\/"},"modified":"2026-10-29T10:21:34","modified_gmt":"2026-10-29T09:21:34","password":"","slug":"nen-7510-2","status":"publish","type":"docs","link":"https:\/\/brandcompliance.com\/en\/docs\/nen-7510-2\/","title":{"rendered":"NEN 7510-2 updated in 2026: what does this mean for you?"},"content":{"rendered":"<p>NEN 7510-2:2024+A1:2026 was published in March 2026. This amended version replaces NEN 7510-2:2024. NEN 7510 is the Dutch standard for information security in healthcare. Part 1 sets out the requirements for an information security management system, while Part 2 describes the associated information security controls.<\/p>\n<p>The amendment follows the revision of <a href=\"https:\/\/brandcompliance.com\/en\/services\/iso-27799-certification\/\">ISO 27799:2025<\/a>, the international standard for information security controls in healthcare. NEN 7510-2 has been updated to align with this standard.<\/p>\n<p><img decoding=\"async\" class=\"size-medium wp-image-26067 aligncenter\" src=\"http:\/\/brandcompliance.com\/wp-content\/uploads\/2026\/04\/gewijzigde-NEN-7510-2-300x200.webp\" alt=\"NEN 7510-2\" width=\"300\" height=\"200\" srcset=\"https:\/\/brandcompliance.com\/wp-content\/uploads\/2026\/04\/gewijzigde-NEN-7510-2-300x200.webp 300w, https:\/\/brandcompliance.com\/wp-content\/uploads\/2026\/04\/gewijzigde-NEN-7510-2-768x511.webp 768w, https:\/\/brandcompliance.com\/wp-content\/uploads\/2026\/04\/gewijzigde-NEN-7510-2-360x240.webp 360w, https:\/\/brandcompliance.com\/wp-content\/uploads\/2026\/04\/gewijzigde-NEN-7510-2-600x400.webp 600w, https:\/\/brandcompliance.com\/wp-content\/uploads\/2026\/04\/gewijzigde-NEN-7510-2.webp 1000w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/p>\n<p>&nbsp;<\/p>\n<h2>Key changes to NEN 7510-2<\/h2>\n<ul>\n<li>Alignment with <strong>ISO 27799:2025<\/strong>, including additions to healthcare-specific guidance in sections 5.12, 5.15, 5.16, 5.30, 5.34, 6.3, 6.8 and 6.9.<\/li>\n<li>Updates to <strong>informative Annexes C, D and E<\/strong>.<\/li>\n<li>In Annex E, the reference to the NIS2 Directive has been replaced by references to the Dutch <strong>Cyberbeveiligingswet <\/strong>(Cybersecurity Act) and <strong>Cyberbeveiligingsbesluit <\/strong>(Cybersecurity Decree), including the corresponding mapping.<\/li>\n<li>Updated terminology: the Dutch term \u201cdirectie\u201d has been replaced by <strong>\u201ctopmanagement\u201d<\/strong> (top management), in line with NEN-EN-ISO\/IEC 27002.<\/li>\n<li>The standard\u2019s <strong>layout<\/strong> has changed from tables to continuous text.<\/li>\n<\/ul>\n<h2>What does this mean for your NEN 7510-certified organization?<\/h2>\n<p>The standard has been updated, but <strong>no new controls <\/strong>have been introduced. The changes mainly consist of clarifications, additions and updates to the guidance.<\/p>\n<p>The <strong>healthcare-specific guidance<\/strong> has been refined or expanded in several areas, in line with ISO 27799:2025. Your organization should therefore assess whether existing controls need to be revised or supplemented.<\/p>\n<p>The updated terminology may also require changes to the wording used in your policies and procedures.<\/p>\n<p>Alongside this amendment to Part 2, organizations are transitioning to NEN 7510-1:2024. Has your organization not yet completed this transition? Read more about the <a href=\"https:\/\/brandcompliance.com\/en\/docs\/transition-to-nen-7510-1-2024\/\">transition to NEN 7510-1:2024 <\/a>and the associated transition audit.<\/p>\n<h2>What does this mean for your certificate?<\/h2>\n<p>Brand Compliance certifies organizations against <strong>NEN 7510-1<\/strong>. The amendment to NEN 7510-2 therefore has no direct impact on your existing certificate. During an audit, however, auditors may ask how your organization applies NEN 7510-2.<\/p>\n<p>Would you like to learn more about <a href=\"https:\/\/brandcompliance.com\/en\/services\/nen-7510-certification\/\">NEN 7510 certification <\/a>and our audit process? Explore our services or <a href=\"https:\/\/brandcompliance.com\/en\/contact\/\">contact us <\/a>if you have questions about your certification.<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>NEN 7510-2:2024+A1:2026 was published in March 2026. This amended version replaces NEN 7510-2:2024. NEN 7510 is the Dutch standard for information security in healthcare. Part&#8230;<\/p>\n","protected":false},"author":22,"featured_media":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"doc_category":[2361],"doc_tag":[],"class_list":["post-28250","docs","type-docs","status-publish","hentry","doc_category-nen-7510-healthcare"],"acf":[],"year_month":"2026-10","word_count":328,"total_views":"15","reactions":{"happy":"0","normal":"0","sad":"0"},"author_info":{"name":"Hilde","author_nicename":"hilde","author_url":"https:\/\/brandcompliance.com\/en\/author\/hilde\/"},"doc_category_info":[{"term_name":"NEN 7510 &amp; healthcare","term_url":"https:\/\/brandcompliance.com\/en\/docs-category\/nen-7510-healthcare\/"}],"doc_tag_info":[],"knowledge_base_info":[],"knowledge_base_slug":[],"_links":{"self":[{"href":"https:\/\/brandcompliance.com\/en\/wp-json\/wp\/v2\/docs\/28250","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/brandcompliance.com\/en\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/brandcompliance.com\/en\/wp-json\/wp\/v2\/types\/docs"}],"author":[{"embeddable":true,"href":"https:\/\/brandcompliance.com\/en\/wp-json\/wp\/v2\/users\/22"}],"replies":[{"embeddable":true,"href":"https:\/\/brandcompliance.com\/en\/wp-json\/wp\/v2\/comments?post=28250"}],"version-history":[{"count":3,"href":"https:\/\/brandcompliance.com\/en\/wp-json\/wp\/v2\/docs\/28250\/revisions"}],"predecessor-version":[{"id":28253,"href":"https:\/\/brandcompliance.com\/en\/wp-json\/wp\/v2\/docs\/28250\/revisions\/28253"}],"wp:attachment":[{"href":"https:\/\/brandcompliance.com\/en\/wp-json\/wp\/v2\/media?parent=28250"}],"wp:term":[{"taxonomy":"doc_category","embeddable":true,"href":"https:\/\/brandcompliance.com\/en\/wp-json\/wp\/v2\/doc_category?post=28250"},{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/brandcompliance.com\/en\/wp-json\/wp\/v2\/doc_tag?post=28250"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}