Standards, legislation & customer requirements
Make compliance practical and demonstrable.
The Compliance Tool translates standards, legislation and customer requirements into practical controls, tasks, documents and evidence. Our Compliance Officers guide implementation, conduct internal audits and help you maintain compliance over time.
Information securityISO 27001
Information security in healthcareNEN 7510
Dutch Cybersecurity ActNIS2
AI managementISO 42001
49developed into practical content
with expert support
with expert support
Why this matters
What demonstrable compliance brings to your organisation.
Demonstrably managing relevant standards, laws and customer requirements strengthens customer confidence, commercial opportunities and control of your organisation.
Our areas of expertise
Expertise in 49 standards, laws and customer requirements.
Popular topics
ISO 27001
Manage information security systematically.
NIS2
Cyber resilience and management accountability.
GDPR (AVG)
Process personal data lawfully and carefully.
Wtta
Authorisation scheme for suppliers of temporary workers.
Browse and search our 49 areas of expertise
49 results found
ISO 27001:2022
Information security management system.
ISO 14001:2015
Environmental management and continual improvement.
ISO 9001:2015
Quality management and process control.
ISO 45001:2018
A management system for health and safety at work, with guidance and software to support implementation.
NEN 7510-1:2017
Previous edition; explore the transition to NEN 7510:2024.
Authorised Economic Operator (AEO)
Customs programme for reliable economic operators.
AEO Security and Safety (AEO-S)
Security within the international supply chain.
AEO Customs Simplifications (AEO-C)
Simplified customs procedures and controls.
Combined AEO-S/AEO-C authorisation
Security and customs simplifications combined.
VodafoneZiggo
Specific customer and supply-chain requirements.
Kwaliteitslabel Sterk Sociaal Werk
Quality framework for social work.
Jeugdwet
Statutory requirements for youth care and its delivery.
Hellios
Supplier and supply-chain requirements requested through Hellios.
EcoVadis
Support with the sustainability assessment and follow-up of scorecard improvements.
RI&E
Risk inventory and evaluation for working conditions.
NIS2
Cyber resilience and management accountability.
RVO HeadFirst Group
Specific customer and supply-chain requirements.
Volksbank
Specific customer and supply-chain requirements.
NEN 7510-1:2024
Current standard for information security in healthcare.
BRL 9500-U
Quality processes for energy performance advice on non-residential buildings.
BRL 9500-W
Quality processes for energy performance advice on homes.
Corporate Social Responsibility (CSR)
Requirements and principles for responsible business.
ISO 42001:2023
Management system for responsible use of AI.
AI Act
European requirements for developing and using AI.
CIIO Maatstaf
Assessment framework for information security and control.
Digital Operational Resilience Act (DORA)
Digital operational resilience in the financial sector.
PGS 15
Safe storage of packaged hazardous substances.
ADR
Requirements for transporting dangerous goods by road.
NEN 4400-1:2023
Guidance and software for obtaining and maintaining the SNA quality mark.
SOC 1
Controls at service providers relevant to financial reporting.
SOC 2
Controls for security, availability and confidentiality.
ISO 27701:2019
Privacy information management system.
ISO 27017:2021
Information security controls for cloud services.
ISO 27018:2020
Protection of personal data in public clouds.
BC 5701
Sector-specific framework available in the Compliance Tool.
Good Practice for Information Security (DNB)
DNB good practices for information security.
Dutch Whistleblower Protection Act
Requirements for reporting channels and whistleblower protection.
Wwft
Customer due diligence, monitoring and reporting obligations.
GDPR (AVG)
Protection and lawful processing of personal data.
Wtta
Authorisation scheme for suppliers of temporary workers.
PPWR
European rules on packaging and packaging waste.
NIS2-SC10 Basic
Basic level of NIS2 Supply Chain.
NIS2-SC20 Substantial
Substantial level of NIS2 Supply Chain.
NIS2-SC30 High
High level of NIS2 Supply Chain.
SURFaudit Information Security Assessment Framework
Information security assessment framework for education and research.
SURF Privacy Assessment Framework
Privacy assessment framework for education and research.
HKZ
Quality standards for healthcare and social care.
Safety Culture Ladder 2.0
Assessment framework for safety awareness and behaviour.
Government Information Security Baseline 2 (BIO2)
Information security baseline for government organisations.
No results found
Try another search term or select “All”.
The library shows the standards, laws and customer requirements developed in the Compliance Tool. We establish which requirements apply to each organisation individually.
ISO
27001
27001
NIS2
GDPR (AVG)
Shared
controls
controls
Less duplicated work
One control can address several obligations.
Policies, risk assessments, supplier assessments and evidence do not need to be created separately for every standard. The Compliance Tool shows where requirements overlap and what else is needed.
- Reuse controls and evidence
- See immediately which requirements overlap
- Record additions for each standard or law
- Work from one consistent foundation for customers and auditors
Examples from practice
Frameworks that often come together in organisations.
The relevant combination depends on your sector, customers and obligations.
Security, customer confidence and AI
ISO 27001+NIS2 / SOC 2+ISO 42001
Healthcare information and privacy
ISO 27001+NEN 7510+GDPR (AVG)
Quality, security and sustainability
ISO 9001+ISO 27001+ISO 14001
Which obligations apply to you?
The applicability check identifies relevant legislation, standards and customer requirements.