|
|
ISO 27001 |
NEN 7510
|
NIS2 Supply chain
|
NIS2 |
|
Application area
|
International
|
National (NL)
|
National (NL)
|
European |
|
Sector
|
All sectors
|
Care
|
All sectors
|
Critical sectors (including healthcare, energy, IT) |
|
Legal status
|
Not legal, globally recognized
|
Sometimes legal, contractually required
|
Industry requirement (quality mark)
|
Legally binding (EU directive, national law) |
|
Objective
|
Information Security Management System
|
Specifically for information security in healthcare
|
Cyber resilience
|
Increasing cyber resilience of essential entities |
|
Approach
|
Risk-based
|
Risk-based, care-specific
|
Process-oriented
|
Risk and incident-driven |
|
Similarities
|
ISMS, continuous improvement, risk analysis |
Based on ISO 27001, supplements for care |
Controls |
Risk management requirements, reporting |
|
Differences
|
Generic, global, non-sector-specific |
NL-focussed, patient-oriented, sector-specific |
More processes |
Legally enforceable, sectoral focus, EU-wide |