Audit methodology · Last verified
DigiD ICT-beveiligingsassessment (DigiD ICT Security Assessment)
Organisations using DigiD must complete an annual ICT security assessment, overseen by Logius under the Dutch Ministry of the Interior. Logius states the assessment keeps DigiD connections safe, though the underlying statutory basis was not confirmed on the pages opened this round.
- Class
- Audit methodology
- Owner
- Logius (Ministerie van Binnenlandse Zaken en Koninkrijksrelaties)
- Last verified
What it is
Logius's own page states, verbatim: "Organisaties die DigiD gebruiken moeten jaarlijks een ICT-beveiligingsassessment doen." (Translation note, not verbatim: organisations that use DigiD must carry out an ICT security assessment annually.)
The same page states, verbatim: "Met ICT-beveiligingsassessments DigiD houdt Logius toezicht op de DigiD-aansluitingen. Hiermee houden we het gebruik van DigiD veilig." (Translation note, not verbatim: with the DigiD ICT security assessments, Logius oversees DigiD connections, keeping the use of DigiD safe.)
Who owns it
Logius, part of the Ministerie van Binnenlandse Zaken en Koninkrijksrelaties, administers the assessment on its own page and describes its own oversight role over DigiD connections.
Who asks for it
Statutory (scoped). Logius's own page states organisations using DigiD must complete this assessment annually. The specific statutory or regulatory basis (e.g. a named law or norm) was not found on the page opened this round and was not verified elsewhere.
Sources
Last verified:
This page is for information only; it does not accredit, certify or endorse any organisation. Requirements and programs change — always confirm against the primary source linked above.