How GGZ Westelijk Noord-Brabant structured information security

With 1100 employees, client care comes first, but digital security is increasingly gaining importance due to new risks and legislation.

Highlights of this success story

No items found.

Client

GGZ Western Noord-Brabant

Standards

Involved consultants

The reason

Need for structure and capacity

In a healthcare organization with 1100 employees, daily client care is, of course, the highest priority. Nevertheless, information security is becoming increasingly important, especially given the increasing digital risks and stricter laws and regulations. Bianca, who has worked at the institution for 23 years, worked to improve processes with limited resources. “Changing our processes takes a lot of time,” she says. “Even editing documents can be a challenge.” At the same time, internal factors, such as changes in governance and complex decision-making, play a role in the process.

‍

Government pressure is increasing, with concrete examples being mandatory compliance with the NEN 7510 standard and the introduction of stricter rules such as the NIS2 directive, where directors can be held personally accountable. This increases the urgency to act quickly and thoughtfully. In this context, external help was sought: GGZ Westelijk Noord-Brabant was looking for a partner who not only brought substantive knowledge but could also help structure and address capacity problems.

‍

“Our common thread was that we did things but didn't have everything documented, or had something documented but did things differently in practice.”

Bianca Bogers

Information Security Officer at GGZ Westelijk Noord-Brabant

Do you recognize the challenges of GGZ Westelijk Noord-Brabant?

De nieuwe NEN 7510:2024 eisen helder in kaart, inclusief alle Annex A onderdelen, direct toepasbaar én gratis te downloaden als PDF.

Our approach

First listen, then do

In November 2023, Fendix started with a GAP analysis. Consultant Jelle started with thorough preparation. “He found out in advance which topics were important and helped us find the right people for the interviews.” The interviews were conducted in one week. After processing, Jelle presented the analysis to the Board of Directors, identifying strengths as well as areas for improvement and attention.

01
02
03
04
05
06
07
08

Next-Gen Consultant speaking

“I mainly removed noise. By preparing the GAP analysis properly and interacting quickly with the right people, it immediately became clear where the real bottlenecks were. With clear roles and structure, you immediately saw teams gain more control. Not by working harder, but because everyone spoke the same language.”

Jelle

van Onna

Information Security Consultant & Project Manager

The results

More control, better processes

The collaboration yielded quick results: processes became clearer, the team built up knowledge, and suppliers were managed more closely. The main difference? Information security is now a standard item on the Board of Directors' agenda. “We have a lot more control,” says Bianca. “We're finally working with central guidelines instead of separate solutions.”

‍

Bianca especially appreciates the practical support she received from Jelle. “What made the difference for me was Jelle's understanding of our work environment. He not only identified what could be improved but also explained why certain methods were needed.” She still remembers how Jelle introduced the RACI model when the organization needed a clear division of roles. “That gave us exactly the structure we needed.”

“Everyone automatically locks their car when leaving it. I wanted information security to become just as second nature, so that every employee in their role is consciously mindful of it. Fendix can help you achieve this very well.”

Bianca Bogers

Information Security Officer at GGZ Westelijk Noord-Brabant

Twee mensen met koffiekopjes in een kantoor met een bruine leren bank en planten.

“Everyone automatically locks their car when leaving it. I wanted information security to become just as second nature, so that every employee in their role is consciously mindful of it. Fendix can help you achieve this very well.”

Bianca Bogers

Information Security Officer at GGZ Westelijk Noord-Brabant

Looking ahead

GGZ Westelijk Noord-Brabant looks ahead. Bianca wants the PDCA cycle to function organization-wide and intertwine information security with all processes. She sees that steps have been taken, but she also knows that there is still plenty to do. With Jelle's support, the organization has not only moved towards NEN 7510 but, above all, created a culture where information security is starting to become a matter of course. Not for the sake of ticking boxes, but for what matters: keeping patient data truly safe and strengthening trust in healthcare.