NEN has published an amendment to NEN 7510-2:2024, bringing the standard back into full alignment with the final version of ISO 27799, the international guideline for information security in healthcare. This guideline, together with ISO 27002, forms an important foundation within NEN 7510-2.
With this amendment, various healthcare-specific controls have been strengthened and updated. In addition, several annexes have been revised, including Annexes C, D, and E. A key change can be found in Annex E, which now includes a mapping between NEN 7510-2 and the Cybersecurity Act. Where it previously referred to NIS2 Directive, the content now better aligns with Dutch laws and regulations.
This update underscores the importance of up-to-date and appropriate measures for the secure processing, storage, and exchange of medical and personal data within healthcare organizations.
For organizations working with NEN 7510, this is a good moment to assess whether existing controls, processes, and documentation are still aligned with the latest requirements and insights.
The updated version of the standard can be downloaded free of charge via:
https://www.nen.nl/nen-7510-2-2024-a1-2026-nl-350012
Source: nen.nl/nieuws
