ISO 27001 Certification: the complete guide
Everything Dutch organizations need to know about achieving and maintaining an ISO 27001 certificate — from risk assessment to a successful external audit.
Trusted by 500+ organizations in the Netherlands
Why ISO 27001 matters 2026 do it
Met 44,374 data breach notifications at the AP in 2025 and an average direct damage of just over €100,000 With every cyberattack, demonstrable information security is no longer a choice. The Cybersecurity Act (NIS2) affects approximately 8,000 organizations — and in tenders and supplier contracts, a certificate is increasingly a strict requirement. This guide provides a down-to-earth and comprehensive answer to what a certification process entails, what it costs, and what an auditor expects.
Key insights in the guide:
- ✓Laws and regulations: what the Cyber Security Act (NIS2), GDPR, BIO and NEN 7510 concretely require — and why a single ISMS lays the foundation for almost the entire playing field.
- ✓Costs & lead time: realistic bandwidths per organization size, all cost items listed, and how to save smartly.
- ✓The route to the certificate: the four-phase process, the five biggest pitfalls, and what happens if you fail — including the recovery path.
A look in the guide
Twenty pages of practical certification knowledge — from the PDCA cycle and the 93 measures to costs, pitfalls, and the external audit.
