ISO 27001:2022
Information security management system.
Standards, laws & requirements
Manage standards, laws and customer requirements from a single common basis.
Many compliance obligations require similar controls: risk management, policies, supplier management, incidents, audits and improvement. The Compliance Tool lets you reuse what is already in place and record only the additional requirements for each framework, law or customer.
ISO 27001Information security
NEN 7510Healthcare information
NIS2Cyber resilience
ISO 42001AI Management
49frameworks in one
platform
platform
ISO
27001
27001
NIS2
GDPR
Shared
measures
measures
Less duplicate work
Implement controls once. Support multiple obligations.
A supplier assessment may contribute simultaneously to ISO 27001, NEN 7510 and NIS2. The same applies to risk analysis, incident processes and internal audits.
- Shared Action Library
- Links between controls and requirements
- Understanding additional requirements per standard or law
- Consistent evidence towards auditors and customers
Library
49 standards, laws and customer-specific requirements in the Compliance Tool.
49 results found
ISO 14001:2015
Environmental management and continuous improvement.
ISO 9001:2015
Quality management and process management.
NEN 7510-1:2017
Information security in care.
Authorised Economic Operator (AEO)
Customs programme for reliable operators.
AEO Security (AEO-S)
Security within the international trade chain.
AEO Customs simplifications (AEO-C)
Simplified customs procedures and control.
Combined authorisation AEO-S/AEO-C
Security and customs simplifications combined.
VodafoneZiggo
Specific customer and chain requirements.
Quality label Strong Social Work
Quality framework for social work.
Youth Act
Legal requirements regarding youth assistance and implementation.
Hellios
Available in the Compliance Tool.
EcoVadis
Assessment framework for sustainability performance.
RI&E
Risk inventory and assessment for working conditions.
NIS2
Cyber resilience and administrative responsibility.
RVO
Specific customer and chain requirements.
Volksbank
Specific customer and chain requirements.
NEN 7510-1:2024
Current standard for information security in healthcare.
BRL9500-U
Assessment Directive for utility buildings.
BRL9500-W
Housing Assessment Directive.
Corporate Social Responsibility (CSR)
Customer-specific requirements for corporate responsibility.
ISO 42001:2023
Management system for responsible AI use.
AI Regulation (AI Act)
European requirements for development and use of AI.
CIIO Staff
Information security and control review framework.
Digital Operational Resilience Act (DORA)
Digital operational resilience in the financial sector.
PGS 15
Safe storage of packaged hazardous substances.
ADR
Requirements for the transport of dangerous goods by road.
NEN 4400-1:2023
Reliability of temporary agency and posting organisations.
SOC 1
Management of service providers relevant for financial reporting.
SOC 2
Control around security, availability and confidentiality.
ISO 27701:2019
Management system for privacy information.
ISO 27017:2021
Information security measures for cloud services.
ISO 27018:2020
Protection of personal data in public clouds.
BC 5701
Available in the Compliance Tool.
Good Practice Information Security (DNB)
Good practices of DNB for information security.
Law protection whistleblowers
Requirements around reporting channels and protection of whistleblowers.
Wwft
Customer due diligence, monitoring and reporting obligations.
GDPR
Protection and lawful processing of personal data.
Wtta
Admission system for companies supplying workers.
PPWR
European rules on packaging and packaging waste.
NIS2-SC10 Basic
Base level for NIS2 Supply Chain.
NIS2-SC20 Substantial
Substantial level for NIS2 Supply Chain.
NIS2-SC30 High
High level for NIS2 Supply Chain.
SURFaudit Review framework Information security
Review framework for information security in education and research.
SURF Review Framework Privacy
Review framework for privacy in education and research.
BRL9500-U/W:2026
Combined assessment framework for utility buildings and dwellings.
HKZ
Quality standards for care and wellbeing.
Safety Culture Ladder 2.0
Assessment framework for safety awareness and behaviour.
Baseline Information Security General government 2 (BIO2)
Baseline for information security within the government.
No result found
Try another search term or choose "Everything."
The library shows the standards, laws and customer requirements built into the Compliance Tool. Applicability is determined for each organisation.
Which route fits?
Start with a strong base and build logically.
ICT & SaaS
ISO 27001→NIS2 / SOC 2→ISO 42001
For organisations that want to combine customer confidence, security and AI governance.
Healthcare & health IT
ISO 27001→NEN 7510→GDPR
For organisations that want to manage healthcare information and privacy with demonstrable control.
Broad business operations
ISO 9001→ISO 27001→ISO 14001
For organisations that manage quality, security and sustainability in an integrated way.
Which requirements apply to your organisation?
The applicability check identifies the relevant laws, standards and customer requirements.