Need for structure and capacity

In a healthcare organization with 1100 employees, daily client care is, of course, the highest priority. Nevertheless, information security is becoming increasingly important, especially given the increasing digital risks and stricter laws and regulations. Bianca, who has worked at the institution for 23 years, worked to improve processes with limited resources. “Changing our processes takes a lot of time,” she says. “Even editing documents can be a challenge.” At the same time, internal factors, such as changes in governance and complex decision-making, play a role in the process.

‍

Government pressure is increasing, with concrete examples being mandatory compliance with the NEN 7510 standard and the introduction of stricter rules such as the NIS2 directive, where directors can be held personally accountable. This increases the urgency to act quickly and thoughtfully. In this context, external help was sought: GGZ Westelijk Noord-Brabant was looking for a partner who not only brought substantive knowledge but could also help structure and address capacity problems.

‍

“Our common thread was that we did things but didn't have everything documented, or had something documented but did things differently in practice.”

Bianca Bogers

Information Security Officer at GGZ Westelijk Noord-Brabant

First listen, then do

In November 2023, Fendix started with a GAP analysis. Consultant Jelle started with thorough preparation. “He found out in advance which topics were important and helped us find the right people for the interviews.” The interviews were conducted in one week. After processing, Jelle presented the analysis to the Board of Directors, identifying strengths as well as areas for improvement and attention.