Towards ISO 27001 and NEN 7510 certification with Stap & Care Group

Stap & Care Group already focused strongly on information security, but due to increasing clients' requirements, structured recording became increasingly important.

Highlights of this success story

No items found.
Client
Stap & Care Group
Standards
Involved consultants

The reason

Clearly define the burden of proof

As a healthcare organization, Stap & Care Group works with sensitive client data on a daily basis. The organization already focused strongly on information security, but due to increasing clients' requirements, structured recording became increasingly important. To achieve that and achieve their ISO 27001 & NEN 7510 certifications, Stap & Care Group enlisted the help of Fendix. With ClickUp as an information security management system (ISMS) and a practical approach, the certification was successfully achieved.

‍

“We already paid a lot of attention to security and things in order, but we hadn't defined it in a structured way yet. As a result, demonstrating that we did this was very difficult,” says Linda, Security Officer and Support Teams Manager at Stap & Care Group. Previously, information security at Stap & Care Group was in order, but without a central system to demonstrate this. Major clients increasingly asked for proof that the processes met the highest security standards. The result: lots of separate documents and time-consuming work to collect the correct information per request.

Download de NEN 7510-checklist

De nieuwe NEN 7510:2024 eisen helder in kaart, inclusief alle Annex A onderdelen, direct toepasbaar én gratis te downloaden als PDF.

Our approach

Implementing ISO 27001 & NEN 7510 with ClickUp

Together with Fendix, Stap & Care Group set up an ISMS in ClickUp. Consultant Tim guided the team step by step and helped the Security Officer and management implement it. With ClickUp, tasks, deadlines and evidence were centrally managed. “The system keeps us sharp and helps us not to forget anything”, says Linda. “In the future, we want to manage even more documents directly in ClickUp.” In addition to the implementation of the ISMS, security awareness was structurally incorporated into the working method, including periodic phishing tests that are now set as standard.

  • 01

  • 02

  • 03

  • 04

  • 05

  • 06

  • 07

  • 08

Next-Gen Consultant speaking

“The success at Stap & Care Group was not in following the standard, but in translating it into healthcare practice. Making ISO 27001 and NEN 7510 workable creates peace and trust in the organization.”
Tim
Smit
Information Security Consultant

The results

A smooth certification process and a successful audit

From the start in February to the audit in December, the process was structured, and the audit was passed smoothly. “Tim's support during the audit was really valuable. Thanks to him, we knew exactly what information we could show at what time.” According to Stap & Care Group, Fendix's guidance made a big difference. “ISO 27001 & NEN 7510 are an enormous book. I don't know if you should want to do that unaccompanied. Tim's experience with audits helped enormously to keep everything running smoothly.”

“Information security has become an integral part of our work. We keep improving and optimizing processes where necessary. Fendix has played an important role in this.”
Linda
Security Officer and Manager Supporting Teams at Stap & Care Group
Twee mensen met koffiekopjes in een kantoor met een bruine leren bank en planten.
“Information security has become an integral part of our work. We keep improving and optimizing processes where necessary. Fendix has played an important role in this.”
Linda
Security Officer and Manager Supporting Teams at Stap & Care Group

Information security as an ongoing process

The certification has been achieved, but information security remains an ongoing process. “It has become an integral part of our work. We keep improving and optimizing processes where necessary.” That is why Stap & Care Group remains a customer of Fendix. With the basics maintenance package keeps the ISMS up-to-date and continues to improve it, and Stap & Care Group will ensure its information security.

‍

Involved consultants

Tim
Smit
Information Security Consultant

Kilian Houthuijzen

Commercial Manager

Kilian

Houthuijzen

Commercial Manager & Partner

Do you also want to get a grip on information security, privacy and AI?

Contact us for a free introduction.

Other success stories

ICT & Media
TAGGRS

How TAGGRS implemented ISO 27001 in 4 months

Succesverhaal met United Waterways
Enterprise
United Waterways

How ISO 9001 Helps UNITED WATERWAYS AG Grow

Healthcare
GGZ Western Noord-Brabant

How GGZ Westelijk Noord-Brabant structured information security

Enterprise
Heras

Heras achieves ISO 27001 certification within one year with worry-free implementation

Enterprise
Total Energies

How Total Energies Charging Solutions Netherlands obtained more than one certificate with the implementation of ISO 27001

ICT & Media
NO

Internal Audits: A Fresh Perspective on ISO 27001 at NOBEARS

ICT & Media
Now Online

NowOnline's Choice for an Interim Security Officer from Fendix

ICT & Media
Nedscaper

With Nedscaper to an ISO 9001 and ISO 27001 certificate in 12 weeks

ICT & Media
SPL

From start-up to ISO 27001 and NEN 7510 certificate in 6 months

Healthcare
Aivory

How Aivory Achieved ISO 27001 and NEN 7510 in Three Months with Zero Findings

Enterprise
Goose VPN

Interactive cybersecurity week at GOOSE VPN