Insights on ISO certification, NIS2, EU regulation and audit readiness in the Netherlands. Practical analysis for leadership, IT and compliance teams, educational, not legal advice.
We cover regulatory changes, audit trends and what organisations can do in practice. Each article links to topics in our knowledge base, from vendor management to processor agreements.
Free tool: Vendor & processor document generator, GDPR, ISO 27001, NIS2, DORA and more; fill in and print as PDF.
For operational ISMS work see ISO Ready. Sources: sources & linking.
Browse the articles below for the latest posts. Combine news with guides on ISO 27001 certification and NIS2 in the knowledge base.
ISO 9001:2026 was published on 16 September 2026. Checked on 17 September 2026: NEN, the Dutch standards body, lists the sixth edition as published. The earlier under publication status no longer applies. Certification bodies are working to a three-year transition period. Confirmed at this check date The sixth edition of ISO 9001 was released on […]
Read article: ISO 9001:2026 is published: what is confirmed and what is not →
ISO plans publication for 16 September 2026; checked on 8 September 2026. A definitive transition deadline was not confirmed.
Read article: ISO 9001:2026 when you already run an ISO 27001 ISMS →
ISO plans publication for 16 September 2026; checked on 8 September 2026. A definitive transition deadline was not confirmed.
Read article: ISO 9001:2026: what you can do now →
Dutch Cbw registration depends on sector, size and exceptions. Significant incidents normally follow a 24-hour, 72-hour and one-month reporting sequence; trust services have a specific exception.
Read article: NIS2 registration duty: who must register and what evidence belongs with it →
Much audit evidence already lives in Microsoft 365. Which controls does M365 cover and how do you export reproducible surveillance evidence?
Read article: ISO 27001 evidence from Microsoft 365: Entra, Purview and Defender in 2026 →
Staff use AI tools without IT knowing. How to bring shadow AI into scope: policy, register and evidence without banning everything.
Read article: Shadow AI in SMEs: bringing unmanaged AI use into your ISMS scope →
Since 2024 ISO 27001 names climate change in clauses 4.1 and 4.2. What does that amendment mean for your context analysis and audit?
Read article: Climate change in your ISMS: the ISO 27001 amendment and what auditors now ask →
Software teams face audit questions on CI/CD, secrets and code review. What is minimum viable SSDLC?
Read article: Secure SDLC: development controls for ISO 27001 and CRA →
Supervisors and auditors ask for evidence of exercised scenarios. How to plan tabletop without consultant overkill?
Read article: Tabletop cyber exercise: NIS2 and ISO evidence in 2026 →
Classification often stays on paper. How to make labels workable for SaaS, email and audit?
Read article: Data classification in the ISMS: from policy to daily use → Since the 2022 revision, Data Loss Prevention (DLP) is an explicit control in ISO 27001 (control 8.12). Yet many SMEs struggle with it: DLP sounds like expensive enterprise software, while auditors mainly want to see that you actually control data leakage through everyday channels. This article shows how to implement DLP pragmatically and make it […]
Read article: Data Loss Prevention (DLP) for SMEs: practical under ISO 27001 (2026) →
Laptops and mobile are the weak point in hybrid work. How do you prove MDM compliance to auditors?
Read article: MDM and endpoint security: ISO 27001 evidence in 2026 →isocertificering.org is operated by Oosterwal Consultancy (oosterwal.com). ISO Ready (iso-ready.nl) has the same owner. Links to ISO Ready refer to our own commercial offering. About us (Dutch)