Clearly define the burden of proof

As a healthcare organization, Stap & Care Group works with sensitive client data on a daily basis. The organization already focused strongly on information security, but due to increasing clients' requirements, structured recording became increasingly important. To achieve that and achieve their ISO 27001 & NEN 7510 certifications, Stap & Care Group enlisted the help of Fendix. With ClickUp as an information security management system (ISMS) and a practical approach, the certification was successfully achieved.

‍

“We already paid a lot of attention to security and things in order, but we hadn't defined it in a structured way yet. As a result, demonstrating that we did this was very difficult,” says Linda, Security Officer and Support Teams Manager at Stap & Care Group. Previously, information security at Stap & Care Group was in order, but without a central system to demonstrate this. Major clients increasingly asked for proof that the processes met the highest security standards. The result: lots of separate documents and time-consuming work to collect the correct information per request.

Implementing ISO 27001 & NEN 7510 with ClickUp

Together with Fendix, Stap & Care Group set up an ISMS in ClickUp. Consultant Tim guided the team step by step and helped the Security Officer and management implement it. With ClickUp, tasks, deadlines and evidence were centrally managed. “The system keeps us sharp and helps us not to forget anything”, says Linda. “In the future, we want to manage even more documents directly in ClickUp.” In addition to the implementation of the ISMS, security awareness was structurally incorporated into the working method, including periodic phishing tests that are now set as standard.