# Secure Audit B.V. > Secure Audit is an independent IT audit firm based in Eindhoven, the Netherlands. We deliver SOC 2 reports, ISAE 3402 assurance, DigiD assessments and support organizations with ISO 27001, NIS2 and DORA compliance. We built our own digital audit platform with AI-powered test approach generation. ## Services - [IT Audit Services](https://www.secureaudit.nl/en/services): SOC 2 Type I & II reports, ISAE 3402 Type I & II assurance, ISAE 3000 assurance, independent IT audits - [Compliance Assessments](https://www.secureaudit.nl/en/services): DigiD assessments, BIO assessments, NIS2 compliance, DORA compliance, NEN 7510 - [Risk Management](https://www.secureaudit.nl/en/services): IT risk assessments, internal control frameworks, third-party risk management - [Security Services](https://www.secureaudit.nl/en/services): Penetration testing, vulnerability scanning, ISO 27001 implementation, IEC 62443 - [Secure Audit Platform](https://www.secureaudit.nl/en): Digital audit platform with real-time progress tracking, evidence exchange, AI-powered test approach generation, continuous monitoring ## Key Facts - Company: Secure Audit B.V. - Location: Achtseweg Zuid 159R, 5651 GW Eindhoven, Netherlands - Certifications and standards: Independent IT audits performed in accordance with recognized standards - Certifications held by auditors: RE (Register EDP-auditor), CISA, ISO 27001 Lead Auditor - Frameworks: SOC 2, ISAE 3402, ISAE 3000, ISO 27001, ISO 27017, ISO 27018, ISO 42001, NEN 7510, IEC 62443, DigiD, BIO, NIS2, DORA, COBIT, NIST - Phone: +31 6 11 75 78 98 - Email: info@secureaudit.nl - LinkedIn: https://www.linkedin.com/company/secure-audit-bv/ ## About - [About us (English)](https://www.secureaudit.nl/en/about) - [Over ons (Nederlands)](https://www.secureaudit.nl/over-ons) - [Contact (English)](https://www.secureaudit.nl/en/contact) - [Contact (Nederlands)](https://www.secureaudit.nl/contact) ## Knowledge Base — English Articles - [SOC 2 Explained](https://www.secureaudit.nl/en/knowledge-base/soc-2-explained): What is a SOC 2 report, who needs one, and how the audit process works - [ISAE 3402 vs SOC 2](https://www.secureaudit.nl/en/knowledge-base/isae-3402-vs-soc-2): Key differences between the two assurance standards - [What is ISAE 3402?](https://www.secureaudit.nl/en/knowledge-base/what-is-isae-3402): Complete guide to the ISAE 3402 assurance standard, Type I vs Type II - [ISO 27001 Certification Guide](https://www.secureaudit.nl/en/knowledge-base/iso-27001-certification-guide): Step-by-step guide to achieving ISO 27001 certification - [ISO 42001 AI Management](https://www.secureaudit.nl/en/knowledge-base/iso-42001-certification-lessons): The new standard for AI management systems — lessons from practice - [SOC 2 Type I vs Type II](https://www.secureaudit.nl/en/knowledge-base/soc-2-type-1-vs-type-2): Which SOC 2 report type suits your organization? - [Continuous Auditing](https://www.secureaudit.nl/en/knowledge-base/continuous-auditing): Moving from annual snapshots to continuous assurance and monitoring - [Pentest vs Vulnerability Scan](https://www.secureaudit.nl/en/knowledge-base/pentest-vs-vulnerability-scan): What is the difference and when do you need which? ## Kennisbank — Nederlandse Artikelen - [SOC 2 uitleg](https://www.secureaudit.nl/kennisbank/soc-2-uitleg): Wat is een SOC 2 rapport en wanneer heb je het nodig? - [ISAE 3402 vs SOC 2](https://www.secureaudit.nl/kennisbank/isae-3402-vs-soc-2): Verschil tussen de twee assurance-standaarden - [Wat is ISAE 3402?](https://www.secureaudit.nl/kennisbank/wat-is-isae-3402): Complete gids over de assurance-standaard - [ISAE 3000 uitleg](https://www.secureaudit.nl/kennisbank/isae-3000-uitleg): De brede assurance-standaard voor niet-financiële informatie - [ISO 27001 certificering stappenplan](https://www.secureaudit.nl/kennisbank/iso-27001-certificering-stappenplan): Het volledige stappenplan voor certificering - [ISO 42001 certificering](https://www.secureaudit.nl/kennisbank/iso-42001-certificering-praktijk): 7 lessen uit de praktijk met AI-management - [NIS2 richtlijn Nederland](https://www.secureaudit.nl/kennisbank/nis2-richtlijn-nederland): Wat NIS2 betekent voor Nederlandse organisaties - [DORA verordening](https://www.secureaudit.nl/kennisbank/dora-financiele-sector): Digital operational resilience voor de financiële sector - [DigiD assessment checklist](https://www.secureaudit.nl/kennisbank/digid-assessment-checklist): Voorbereiding op het DigiD assessment - [DigiD assessment verplicht](https://www.secureaudit.nl/kennisbank/digid-assessment-verplicht): Wanneer verplicht en wat houdt het in? - [SOC 2 Type I vs Type II](https://www.secureaudit.nl/kennisbank/soc-2-type-1-vs-type-2): Welk rapport past bij jouw organisatie? - [SOC 2 Trust Services Criteria](https://www.secureaudit.nl/kennisbank/soc-2-trust-services-criteria): De vijf pijlers uitgelegd - [SOC 2 rapport aanvragen](https://www.secureaudit.nl/kennisbank/soc-2-rapport-aanvragen): Zo werkt het proces - [IT-audit kosten](https://www.secureaudit.nl/kennisbank/it-audit-kosten): Wat kost een IT-audit? Prijsindicatie en factoren - [IT-audit voor startups en scale-ups](https://www.secureaudit.nl/kennisbank/it-audit-voor-startups-scaleups): Wanneer heb je een audit nodig? - [Audit readiness assessment](https://www.secureaudit.nl/kennisbank/audit-readiness-assessment): Ben je klaar voor een IT-audit? - [Continuous auditing](https://www.secureaudit.nl/kennisbank/continuous-auditing): Van jaarlijkse momentopname naar doorlopend inzicht - [Pentest vs vulnerability scan](https://www.secureaudit.nl/kennisbank/pentest-vs-vulnerability-scan): Wat is het verschil? - [Cloud security audit](https://www.secureaudit.nl/kennisbank/cloud-security-audit): AWS, Azure en Google Cloud beveiliging beoordelen - [Zero Trust architectuur](https://www.secureaudit.nl/kennisbank/zero-trust-architectuur): Principes en implementatie - [Ransomware bescherming](https://www.secureaudit.nl/kennisbank/ransomware-bescherming-audit): Weerbaarheid beoordelen en vergroten - [Logging en monitoring / SIEM](https://www.secureaudit.nl/kennisbank/logging-monitoring-siem): Fundament van detectie en response - [Toegangscontrole en IAM](https://www.secureaudit.nl/kennisbank/toegangscontrole-iam-audit): Identity and Access Management in IT-audit - [Change management](https://www.secureaudit.nl/kennisbank/change-management-it-audit): Gestructureerd wijzigen van IT-systemen - [Security awareness](https://www.secureaudit.nl/kennisbank/security-awareness-training): Training en phishing-simulaties - [Incident response plan](https://www.secureaudit.nl/kennisbank/incident-response-plan-audit): Opzetten en audit-eisen - [Third-party risk management](https://www.secureaudit.nl/kennisbank/third-party-risk-management): Grip op uitbestede IT-diensten - [Business continuity en IT-audit](https://www.secureaudit.nl/kennisbank/business-continuity-it-audit): BCM beoordelen en testen - [AVG en IT-audit](https://www.secureaudit.nl/kennisbank/privacyrecht-avg-it-audit): Privacycompliance technisch getoetst - [Gap-analyse informatiebeveiliging](https://www.secureaudit.nl/kennisbank/gap-analyse-informatiebeveiliging): Eerste stap richting certificering - [NEN 7510 voor de zorg](https://www.secureaudit.nl/kennisbank/nen-7510-zorg): Informatiebeveiliging in zorginstellingen - [BIO overheid](https://www.secureaudit.nl/kennisbank/bio-overheid-informatiebeveiliging): Informatiebeveiliging bij de overheid - [IEC 62443](https://www.secureaudit.nl/kennisbank/iec-62443-industriele-cybersecurity): Cybersecurity voor industriële automatisering - [Interne controle framework](https://www.secureaudit.nl/kennisbank/interne-controle-framework): Een effectief IT-interne controle framework opbouwen - [Risicomanagement en toezichthouders](https://www.secureaudit.nl/kennisbank/risicomanagement-toezichthouders): IT-risicomanagement onder de loep - [ISO 27001:2022 update](https://www.secureaudit.nl/kennisbank/iso-27001-2022-update): Wat is er veranderd? - [ISO 42001 AI-management](https://www.secureaudit.nl/kennisbank/iso-42001-ai-management): De nieuwe standaard voor AI - [DORA verordening details](https://www.secureaudit.nl/kennisbank/dora-verordening-financiele-sector): Wat financiële instellingen moeten weten ## Feeds & Technical - [RSS Feed](https://www.secureaudit.nl/feed.xml): Latest knowledge base articles - [Sitemap](https://www.secureaudit.nl/sitemap.xml): Full XML sitemap - [Privacy Policy](https://www.secureaudit.nl/privacybeleid) - [Terms & Conditions](https://www.secureaudit.nl/algemene-voorwaarden)