VIPP Audits


The Acceleration Program for Information Exchange Patient and Professional (VIPP) aims for hospitals in The Netherlands to digitize in order to make healthcare safer, more patient-oriented and more efficient. This means that healthcare institutions can exchange information digitally with the patient in a standardized and secure manner.

Adobe Stock 239699914


Institutions for specialist medical care (with the exception of academic hospitals, are divided into the three target groups VIPP 1 = Hospitals, VIPP 2 = other institutions for specialist medical care and VIPP 3 = GGZ institutions). In the period 2017-2021, these institutions may be eligible for a subsidy from VWS to give patients digital and standardized access to their own medical data. Following these VIPP programs, a follow-up subsidy program has been started to stimulate the digital exchange of information with a patient's PGO and between professionals aimed at specialist medical care and audiological centers (VIPP 5) with an end date of June 30, 2023.


The subsidy will enable institutions to make standardized patient data accessible, so that:

  • patients receive correct and complete information;
  • patients can share the information (or have them share) with other healthcare providers;
  • the way is open for further healthcare innovations in the field of ICT.


As a condition for granting the government subsidy, the Ministry of VWS has determined that an IT auditor (RE) must determine whether the modules have been successfully completed on the basis of manuals drawn up by the Ministry of Volksgezondheid, Welzijn en Sport for the final test.


The VIPP assessments are performed by Registered EDP auditors (REs) within the framework of the Assurance Engagement Framework and therefore in accordance with Guideline 3000. The VIPP assessment results in a report with the auditor's opinion on the extent to which the hospital has met the requirements. This report serves as justification information for the subsidy applied for in accordance with the Decree establishing a policy framework for subsidies for the Acceleration Program for Information Exchange Patient and Professional.


How can Secura help?

With Secura's broad security expertise, Secura is a strong partner for the implementation of the VIPP audit, possibly in combination with the DigiD audit. In addition, Secura is also happy to help you with the NVZ

Secura Contact Shape
Partners of Secura

Cybersecurity is more than technology alone. Secura collaborates with partners in compliance and risk management, integrated application security, privacy, IT- and internet law and certification.