Operators delivering vital and digital services are subject to new safety requirements under the so-called NIS directive*

Anyone who identifies as a provider of a vital service under NIS regulation shall notify it to the relevant supervisory authority. IVO is the health care regulator.

In order to assess a vendor's compliance with the regulatory framework under the NIS, IVO needs a system to obtain and assess information from suppliers before conducting inspection.

A number of questions shall be sent to healthcare providers who have signed up as providers of vital services under NIS regulation.

Background, scope and purpose

Operators delivering vital and digital services are subject to new safety requirements under the so-called NIS directive*

Anyone who identifies as a provider of a vital service under NIS regulation shall notify it to the relevant supervisory authority. IVO is the health care regulator.

In order to assess a vendor's compliance with the regulatory framework under the NIS, IVO needs a system to obtain and assess information from suppliers before conducting inspection.

A number of questions shall be sent to healthcare providers who have signed up as providers of vital services under NIS regulation. At present, this is about 400 supervisory items.

*The NIS Directive is an EU directive on measures for a high common level of security in networks and information systems across the EU. This means, among other things, that certain providers of vital and digital services, including the health service, should take security measures to address risks and incidents in networks and information systems on which they depend to provide the services.