Need for structure and capacity

In a healthcare organization with 1100 employees, daily client care is of course the highest priority. Nevertheless, information security is becoming increasingly important, especially given the increasing digital risks and stricter laws and regulations. Bianca, who has worked at the institution for 23 years, worked to improve processes with limited resources. “Changing our processes takes a lot of time,” she says. “Even editing documents can be a challenge.” At the same time, internal factors, such as changes of governance and complex decision-making, play a role in the process.

‍

Government pressure is increasing, with concrete examples being the mandatory compliance with the NEN 7510 standard and the arrival of stricter rules such as the NIS2 directive, where directors can be held personally accountable. This increases the urgency to act quickly and thoughtfully. In this context, external help was chosen: GGZ Westelijk Noord-Brabant was looking for a partner who not only brought substantive knowledge, but could also help structure and deal with capacity problems.

‍

“Our common thread was that we did things but didn't have everything on paper, or had something on paper but did things differently in practice.”

Bianca Bogers

Information Security Officer at GGZ Westelijk Noord-Brabant

First listen, then do

In November 2023, Fendix started with a GAP analysis. Consultant Jelle started with a strong preparation. “He found out in advance which topics were important and helped us find the right people for the interviews.” The interviews were conducted in one week. After processing, Jelle presented the analysis to the Board of Directors, identifying strengths as well as areas for improvement and attention.