No faith in ISMS software. Until the audit.

NEN 7510 recertified. From separate files and external dependency to full control, in two months.
Hosted in EU Icon
Alex Beckers • Security Consultant
We should have done this years ago

When Two Clicks Replace a Folder Full of Documents

EerstelijnsZorg Zoetermeer (EZZ) is the organisation behind the region's primary care, supporting general practitioners, pharmacists and other care providers, and handling the practical side too: automation, accommodation and invoicing (factoring) for GP practices. Part of EZZ, the SFHE foundation (Stichting Factoring Huisartsenzorg en overige Eerstelijnszorg), had held NEN 7510 certification since 2021.

Its ISMS worked, but it was stitched together from a stack of separate files, and the need for something more solid kept growing. With ISOPlanner™, the overview finally clicked into place: the links between risks, policies and measures became clear, and EZZ could manage its own risk analyses and ISMS without leaning on an outside supplier.

A Skeptic Goes Looking

Alex Beckers, the external security consultant leading SFHE's NEN 7510 recertification, did not come to this as a believer:
"Honestly, I had never been a fan of running a management system on software. It struck me as overkill, and I assumed I would have to bend to a whole new system and spend more time on it than I did with my own separate files."

But his real problem ran deeper than the extra effort:
"Holding the coherence between all those separate files together was hard, and I had lost the overview. I wanted tooling flexible enough to fit me, not impose its own way. That is where software could earn its place."

1
Embedded ML
API Calling ML
2

Taking Back Control

The other reason Beckers went looking was dependence. For risk analysis he had leaned on an external party whose method was so elaborate he could not run it himself.

"I couldn't produce a new risk analysis or adjust a policy on my own, I always had to go back to them. That dependence started to grate. I wanted control."

The Demo Decided It

With only a vague idea of what ISMS tools could even do, Beckers scanned the market. It was crowded, with options across Europe and even the United States, but for a healthcare institution his filter was simple: a Dutch provider that clearly supported NEN 7510.

"I narrowed ten providers down to three, ISOPlanner™ among them. Then I got a demonstration and dug into the demo environment myself. That is what made the difference, it gave me a real sense of what was possible."

3
ML Platform
API Calling ML
4

Not Starting From Scratch

The SharePoint integration was a major draw: EZZ could bring its existing documents across instead of starting from zero. They deliberately began with an empty environment and moved their own risk analyses, policies and measures in. It took some effort, but ISOPlanner's structure kept it contained, the entire migration was done in about two months.

Understood It Immediately

What sealed it was clarity without coercion: ISOPlanner™ guided without dictating a method. Beckers: "I have been in ICT for years, so I pick up systems quickly, but I understood the ISOPlanner™ platform immediately. The navigation was logical, and I could see straight away how to bring our documents into the ISMS. With the other systems, I had to work much harder to grasp the structure and the interrelationships."

5
ML Platform
API Calling ML
6

Every Task in One View

Finally, ISOPlanner™ pulls every open and periodic task into a single view. Beckers: "Managing tasks in ISOPlanner™ is genuinely inviting, and the Outlook link keeps them in front of me. With that overview, I expect maintaining the standard to take me less time as we go."

A self-confessed sceptic, Beckers wanted tooling that fit him, not a system that imposed its own method. In about two months he moved EZZ's entire ISMS, the risk analyses, policies and measures, into ISOPlanner™, pulled the overview together and ended the dependence on an outside party. NEN 7510 recertification followed without drama. By his own admission, his only regret was not doing it sooner.

See how ISOPlanner™ handles NEN 7510.