Where does your organisation stand on NEN 7510?
Fourteen questions across the domains of the standard. Not an audit and not a certificate — but an honest picture of where the gaps are, and a report you can put on the table in a meeting.
1 of 14
What this scan is not
A self-assessment measures what you believe about your own compliance. An auditor asks for evidence: the register, the log entries, the signed agreement, the report from the last test. If you score high here but cannot produce that evidence, you are still not in a good position. Use this to decide where to start.
Where things go wrong in practice
Three issues come up almost everywhere: access rights that remain in place after a change of role, processing agreements that no longer match what the supplier actually does, and logging that is captured properly but that nobody reviews. Not coincidentally, these are also the first things an auditor asks about.