DigiD and Suwinet Compliance
ServicesConsultingIT Audit & AssuranceCompliance based on digital laws and regulations
DigiD and Suwinet Compliance
Does your organisation offer services with DigiD? Or do you make use of Suwinet's data services? We can help you with these issues.
The National Cybersecurity Centre (NCSC) and Logius have drawn up security guidelines for web applications on behalf of the government. These have been translated into requirements for DigiD connections. Bureau Keteninformatisering Werk & Inkomen (BKWI) has developed standards that must be met when using Suwinet. Organisations that use DigiD and/or Suwinet are required to demonstrate compliance with these guidelines. The team of IT Audit & Advisory helps you to be in control by:
- Performing a baseline audit (baseline assessment).
- Making preparations for an IT security assessment.
- Conducting the annual mandatory IT security assessment.
- Vouching for the security of your suppliers with a Third Party memorandum.
This approach not merely determines whether your use of DigiD is safe, but also offers prospects for the security of the entire supply chain. It saves you time and you do not need to delve into laws and regulations.
Forvis Mazars can help you with
The experienced team of IT Audit & Advisory assesses your software packages, projects, control and security and advises you on how this can be optimised.
Want to know more?
Niels Verhagen Senior Manager IT Audit
ENSIA audits 2020: changes DigiD and Suwinet
2 October - The start of the ENSIA audits (a one-time IT audit) is almost upon us. Many municipalities will undergo a pre-audit with their auditor in the fourth quarter of 2020 in preparation of the final audit and board statement in order to be accountable for the internal control as at 31 December 2020.
Gevolgen Algemene Verordening Gegevensbescherming
Dit whitepaper geeft een overzicht van de belangrijkste gevolgen van de invoering van de nieuwe Algemene Verordening Gegevensbescherming (AVG) voor organisaties en de maatregelen die zoal getroffen moeten of kunnen worden om aan de AVG te voldoen.
Privacy Compliance
Privacy is an issue that is growing in size, complexity and relevance. When you process personal data, you are obliged to safeguard the privacy of these individuals. But do you know which privacy regulations and principles your data processing must comply with? And are you aware of the risks involved in data processing?
Data Protection Impact Assessment
A data protection impact assessment (DPIA) is an instrument to identify the privacy risks of data processing in advance and then take measures to reduce these risks. A DPIA is mandatory under certain conditions.
Digital compliance
Information technology and large-scale digital data processing introduce additional (privacy) risks, inherent in the use of this technology. These need not be directly visible at the level of end use.
De NIS2-richtlijn: hoe bereidt u zich voor?
De Network and Information Security, aldus de NIS2-richtlijn, is op 14 december 2022 aangenomen door het Europese parlement en de Raad van de Europese Unie, met als doel om een hoger niveau van cybersecurity te bereiken binnen de EU. Wat betekent de NIS2-richtlijn voor uw organisatie?