Information security

Information security

Information security is important not only for software companies. Every organization, whether public or private, large or small, must ensure safe data management. As an organization, you want to protect all corporate and personal information carefully.

How can you do this effectively and demonstrably?

We test, inspect, certify and train your organization to handle information securely. This includes penetration testing, ISO 27001 and NEN 7510 certifications. You’ll stay up to date and compliant with the latest laws and regulations, while providing clients and customers the confidence that their data is safe.

Working with mobile

Manage your information security risks

In a world of big data and online information, both consumers and companies want assurance that their data is secure. Risk management is essential for any organization. With ISO 27001 certification, you demonstrate that you take information management seriously, showing your customers, employees and partners that you are a reliable partner. The ISO 27001 standard provides a solid foundation for a structured approach.

Why Kiwa?

One-stop-shop: services for OT, IT, and IoT under one roof

Independent, objective assessments

Expertise in laws and regulations

Proven quality in testing, inspection, certification and training

Forward-looking vision on cybersecurity

Contact

Want to know more about cybersecurity?

Our experts have deep knowledge and experience in specific fields. Questions, dilemmas, or just curious? We’re happy to share our insights.

Schedule an appointment

The latest news about cybersecurity

View all the news

NEN 7510 for healthcare sector information security updated

The NEN 7510 standard for information security in the healthcare sector has been revised. The new NEN 7510-1:2024 was published on 16 December 2024 and replaces the previous version, NEN 7510:2017+A1:2020. The old version of the standard can still be used for certification under accreditation until 20 February 2027.

ISO 27001 and ISO 42001: A perfect match for information security and AI management

To implement AI safely and responsibly, international standards such as ISO 27001 and ISO 42001 play a crucial role. While ISO 27001 focuses on data protection, an AI management system (AIMS) under ISO 42001 is designed to manage and optimize the use of AI within an organization. By combining ISO 27001 and ISO 42001, businesses can develop a stronger and more proactive approach to information security.

The importance of input validation in IoT security

Cybersecurity has been a passion of mine for years. My journey in this field began out of curiosity, leading me to specialize in web penetration testing. Since joining Kiwa, my focus has shifted to IoT security, with an emphasis on testing against standards like ETSI EN 303645. One topic that consistently fascinates me is input validation—an area where web penetration testing and IoT security assessments often intersect.

Cybersecurity

Revised NEN 7510 published

To keep quality standards relevant and up-to-date, they are periodically revised. Following the revision of ISO 27001 in 2022, a new version of the NEN 7510 has recently been published. Below, we highlight some of the key changes in the NEN 7510:2024.