NOREA, de beroepsorganisatie van IT-auditors
NOREA is the Dutch professional association for IT-auditors, founded in 1992, accrediting approximately 1,800 Register EDP-Auditors through a unique post-master education program and providing regulatory frameworks, standards, and quality oversight for IT-audit practice in the Netherlands.
- Company typePrivate
- Founded1992
- HeadquartersAmsterdam, Netherlands
- Headcount51–100
- GTM typeB2B
- OfferingServices
What NOREA, de beroepsorganisatie van IT-auditors does
NOREA, founded in 1992, is the Dutch professional association for IT-auditors (formally: Nederlandse Orde van Register EDP-Auditors) and the sole body authorized to register RE (Register EDP-Auditor) credentials in the Netherlands. It is NBA-accredited, allowing RE members to operate on equal footing with registered accountants, and serves approximately 1,800 registered IT-auditors plus aspirant, associate, and retired members. The organization maintains the public RE register, enforces quality through mandatory 120 PE points per 3-year period, and operates a disciplinary framework. NOREA runs the world's only post-master IT-audit education program (minimum 4,500 study hours over three years) through partnerships with four universities (UvA, Erasmus, TIAS, VU).
NOREA's core products are professional standards and regulatory guidance frameworks rather than software. These include the DORA in Control Framework, the Cbw (NIS2) Control Framework (co-developed with Auditdienst Rijk), the DORA Incident Classification Tool (co-developed with RiskNow), the DORA Exit Plan Template, the ICT Risk Management Framework Template, the SOC Maturity Framework, and the Privacy Control Framework. The organization also publishes the IT-Auditor magazine, the REZINE newsletter, and several podcasts, and offers the Privacy Audit Proof certification service.
Revenue is generated primarily through recurring membership dues (RE members €525/year, aspirants and associates €155/year, retired €118/year), supplemented by educational programs with CEDEO accreditation, event and symposium fees, and publications. With 61 staff supporting the bureau, NOREA operates as a member-funded non-profit governed by an elected board, currently chaired by Marc Welters, with Boris Scheepers as bureau Director. Strategic direction is shaped by the 2025-2029 plan, with active taskforces addressing DORA, NIS2/Cbw, and broader regulatory uncertainty.
NOREA, de beroepsorganisatie van IT-auditors firmographics
Firmographics- Name
- NOREA, de beroepsorganisatie van IT-auditors
- Legal name
- NOREA, de beroepsorganisatie van IT-auditors
- Website
- https://norea.nl
- Company type
- Private
- Founded year
- 1992
- Operating status
- Operating
- Headcount range
- 51–100 employees
- Short description
- NOREA is the Dutch professional association for IT-auditors, founded in 1992, accrediting approximately 1,800 Register EDP-Auditors through a unique post-master education program and providing regulatory frameworks, standards, and quality oversight for IT-audit practice in the Netherlands.
- Ownership category
- akta.pro rank
NOREA, de beroepsorganisatie van IT-auditors industry classification
Industry- Product category
- Professional Association Services - IT Audit
- NAICS
- Management, Scientific, and Technical Consulting Services (5416), Other Scientific and Technical Consulting Services (54169)
- SIC
- Services-Membership Organizations (8600), Services-Management Consulting Services (8742)
- akta.pro primary industry
- Audit Management (HDADAIAF)
- akta.pro secondary industries
- Internal Audit & SOX/ICFR Advisory (BPAHAFAD), Finance, Accounting & Risk (CFA/CPA/FRM) Certifications (EDAAANAD), Audit & Assurance (Internal/External, SOX) (EDABAJAE), Institutional & Programmatic Accreditation Audits (EDADAGAA)
Keywords
Where NOREA, de beroepsorganisatie van IT-auditors is headquartered
LocationHeadquarters
- HQ city
- Amsterdam
- HQ country
- Netherlands
- HQ region
- Europe
Offices2 records
Markets served
NOREA, de beroepsorganisatie van IT-auditors business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Operations, Marketing or Sales, Technology or R&D, Others
Revenue model
- Membership Dues: NOREA generates revenue primarily through annual membership fees from approximately 1,800 registered RE members plus aspirant, associate, and retired members. The organization maintains an public register of qualified IT-auditors.
- Educational Programs and Training: NOREA organizes courses, training sessions, symposia, and educational activities. The organization has CEDEO certification, allowing it to grant education credits for Accountancy programs. E-learning Cloud Fundamentals and other training programs are offered to members.
- Publications and Magazines: NOREA publishes the IT-Auditor magazine and various guides, frameworks, and professional publications for members and the broader IT-audit community.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Register Members (RE's) - Full professional members with RE certification |
| Subscription | Annual | Aspirant Members - Students of recognized IT-audit programs |
| Subscription | Annual | Associate Members - Individuals with affinity for IT-audit but not meeting RE requirements |
| Subscription | Annual | Retired Members - RE's no longer active in the profession |
Go-to-market motion1 record
Distribution channels4 records
Marketing channels10 records
NOREA, de beroepsorganisatie van IT-auditors product offering
Product offeringCore offering
NOREA operates as the Dutch professional association for IT-auditors (Register EDP-Auditors), providing RE certification, professional standards, ethical oversight, and continuing education (120 PE points per 3-year period). It maintains a public RE register of approximately 1,800 qualified IT-auditors, delivers regulatory compliance frameworks and tools for DORA, NIS2/Cbw, privacy, and SOC maturity, and publishes the NOREA Magazine, REZINE newsletter, and podcasts for the IT-audit community.
Product overview
NOREA is the Dutch professional association for IT-auditors, not a software company. The organization provides a professional registry of approximately 1,800 registered IT-auditors (REs), publishes the NOREA Magazine and REZINE newsletter, offers Privacy Audit Proof certification services, produces podcasts on IT-audit topics, and develops guidance frameworks and templates for regulatory compliance including DORA and NIS2.
Differentiator
Problem solved
Functional benefit
Products and services
- DORA Incident Classification Tool Online questionnaire tool co-developed with RiskNow that helps financial entities determine whether an ICT incident is classified as major and requires reporting to competent authorities under the Digital Operational Resilience Act (DORA). Based on official Regulatory Technical Standards.
- Privacy Audit Proof Certification service that allows organizations to demonstrate through independent audit that their privacy controls meet required standards, using the NOREA Privacy Control Framework for GDPR/Wpg compliance.
- Public RE Register (Openbaar Register) Publicly accessible online register of registered IT-auditors (REs) where members can be searched by name, showing member number, registration date, and any temporary suspension.
- DORA Template Exit Plan Document template developed by the NOREA DORA Taskforce to help organizations comply with DORA exit planning requirements, supporting documentation and implementation of exit plans for ICT third-party providers.
- ICT Risk Management Framework Template Practical template for ICT risk management framework reporting, supporting organizations in preparing DORA Article 6(5) and RTS Article 27 compliance reviews.
- DORA in Control Framework Comprehensive control framework for Digital Operational Resilience Act compliance, developed by NOREA's Taskforce DORA to help financial institutions implement DORA requirements.
- Cbw (NIS2) Control Framework Practical evaluation tool developed by Auditdienst Rijk in collaboration with NOREA to help organizations understand and implement the Dutch Cybersecurity Act (Cbw) and underlying decree (Cbb), which implement the European NIS2 directive. The framework is modular and can be adapted to sector or organization-specific requirements.
- RE Certification and Membership Professional certification program for IT-auditors providing official RE (Register EDP-Auditor) registration. Members join through a formal admission procedure requiring recognized IT-audit education, background check (VOG), and minimum three years of relevant experience. Maintain active registration through 120 PE points per 3-year period.
- NOREA Educational Programs and Training Educational programs, courses, training sessions, symposia, and e-learning offerings including E-learning Cloud Fundamentals. NOREA holds CEDEO certification allowing it to grant education credits for Accountancy programs.
- NOREA Magazine (IT-Auditor Magazine) Professional magazine featuring articles on IT-auditing topics including cybersecurity, digital transformation, privacy, and professional development.
- NOREA Podcasts Audio podcast series covering IT-audit topics, regulatory developments including DORA, NIS2, and professional practice discussions. Produced with Radiofabriek at Mediapark Hilversum.
- REZINE Newsletter Monthly digital newsletter providing updates on association activities, regulatory developments, and professional news for members.
Quantifiable outcome
- Approximately 1,800 RE's currently registered with NOREA
- +3 more outcomes
Companies that use NOREA, de beroepsorganisatie van IT-auditors
Customer profileNamed customers4 records
Segments5 records
Ideal customer profiles5 records
NOREA, de beroepsorganisatie van IT-auditors technology and API
TechnologyTechnology focussed No
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration1 record
Feature7 records
NOREA, de beroepsorganisatie van IT-auditors partnerships and signals
Strategic signalPartnerships
Ten partnerships are on record, tiered minor and core.
- EraneosminorCo-organized event on digital sovereignty with Eraneos on June 25, 2026 at their Amsterdam location. Eraneos hosted the event focusing on digital autonomy perspectives.
- NBA (Nederlandse Beroepsorganisatie van Accountants)coreNOREA is accredited by NBA, allowing RE's (Register EDP-Auditors) to operate on equal footing with registered accountants. NOREA also uses NBA's ERP application for member administration, with a data processing agreement in place.
- ISACA NL ChaptercoreJoint Young Professionals commission between ISACA NL Chapter and NOREA. Activities include Future Proof sessions, shared events, and professional development for young IT-audit and IT-risk professionals.
- Auditdienst Rijk (ADR)coreCollaboration on NIS2 Control Framework development. ADR and NOREA jointly developed the Cbw (NIS2) Control Framework and accompanying study report for Dutch cybersecurity compliance.
- RadiofabriekminorPodcast production partner for NOREA podcasts. Recording, editing, and publishing moved to Radiofabriek at Mediapark Hilversum for enhanced quality.
- Ministry of the Interior and Kingdom Relations (BZK)coreThe Cbw (NIS2) Control Framework was developed in consultation with BZK. The framework addresses Dutch implementation of NIS2 directive requirements.
- Universities (UvA, Erasmus, TIAS, VU)coreFour universities offer NOREA-recognized IT-audit education programs. The Commissie van Toelating evaluates and approves these programs. Programs require minimum post-initial master level education with approximately 2-2.5 years part-time study.
- De Nederlandsche Bank (DNB)coreDNB recognizes the value of RE IT-auditors. DNB representatives (including Ingrid Talsma) speak at NOREA events on digital resilience and cybersecurity topics.
- Autoriteit Financiële Markten (AFM)coreAFM recognizes the value of RE IT-auditors and their role in financial sector oversight. AFM publishes guidelines that interact with NOREA's professional standards.
- NCSC and Cbw SupervisorscoreThe Cbw (NIS2) Control Framework was shared with NCSC and Cbw supervisors. They provided a joint response supporting sector-wide collaboration on cybersecurity standards development.
Scale indicators6 records
Recent moves6 records
Expansion highlights8 records
NOREA, de beroepsorganisatie van IT-auditors competitors and assessment
Company assessmentDirect peers
- NBA (Nederlandse Beroepsorganisatie van Accountants): Dutch professional body for accountants that accredits NOREA. NBA is a sister professional organization with regulatory oversight of the Dutch accounting profession and overlapping jurisdiction over IT-audit quality assurance.
- ISACA: Global professional association for IT governance, risk, audit, and cybersecurity professionals (CISA, CISM, CGEIT, CRISC). ISACA is the most direct international peer to NOREA, with overlapping IT-audit membership and competing certifications.
- ISACA Netherlands Chapter: The Dutch chapter of ISACA, with which NOREA runs a joint Young Professionals commission. Directly competes with NOREA for Dutch IT-audit and IT-risk professionals while also collaborating on member events.
Broad incumbents
- Institute of Internal Auditors (IIA): Global professional association for internal auditors (CIA, CRMA certifications). IIA is a broader-incumbent peer — internal audit overlaps with IT audit but IIA's scope is wider, and IIA operates globally with national chapters.
- AICPA: American Institute of CPAs — US national professional body for accountants with significant IT-audit and cybersecurity assurance credentialing (CITP). Functions as a structural analog to NBA in setting professional standards.
- ICAEW (Institute of Chartered Accountants in England and Wales): UK chartered accountancy body with IT-audit and assurance oversight. Comparable to NBA — sister accounting body whose relationship to internal IT-audit specialization resembles NOREA's positioning.
Emerging players
- IAPP (International Association of Privacy Professionals): Global privacy profession body (CIPP, CIPM, CIPT). Overlaps with NOREA's privacy control framework area and competes for the same professionals focused on data protection compliance and audit.
Others
- APMG International: Global accreditation and certification body that develops frameworks including cybersecurity and risk management. Adjacent to NOREA's framework-development role but operates as a third-party certification house rather than a member association.
Regional players
- Chartered IIA (UK): UK professional body for internal auditors offering globally recognized certifications. Comparable professional structure to NOREA but UK-focused; represents how a regional peer operates with similar member-driven, quality-assured model.
- NOREA Belgium / LIIA: Comparable IT-audit and internal audit professional bodies operating in neighboring markets (Belgium, Luxembourg). Regional peers whose scope and structure are similar to NOREA's Dutch franchise model.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights6 records
Customer concentration
NOREA, de beroepsorganisatie van IT-auditors social profiles
Digital presenceNOREA, de beroepsorganisatie van IT-auditors financial estimates
Financial estimateRevenue estimate
Valuation estimate
NOREA, de beroepsorganisatie van IT-auditors leadership team
Management profileNumber of profiles
Profiles13 records
NOREA, de beroepsorganisatie van IT-auditors funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
NOREA, de beroepsorganisatie van IT-auditors M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about NOREA, de beroepsorganisatie van IT-auditors
What does NOREA, de beroepsorganisatie van IT-auditors do?
NOREA operates as the Dutch professional association for IT-auditors (Register EDP-Auditors), providing RE certification, professional standards, ethical oversight, and continuing education (120 PE points per 3-year period). It maintains a public RE register of approximately 1,800 qualified IT-auditors, delivers regulatory compliance frameworks and tools for DORA, NIS2/Cbw, privacy, and SOC maturity, and publishes the NOREA Magazine, REZINE newsletter, and podcasts for the IT-audit community.
Is NOREA, de beroepsorganisatie van IT-auditors a public or private company?
NOREA, de beroepsorganisatie van IT-auditors is a private company. It is classified as nonprofit foundation owned and is currently operating.
When was NOREA, de beroepsorganisatie van IT-auditors founded?
NOREA, de beroepsorganisatie van IT-auditors was founded in 1992. It employs 51 to 100 people.
Where is NOREA, de beroepsorganisatie van IT-auditors based?
NOREA, de beroepsorganisatie van IT-auditors is headquartered in Amsterdam, Netherlands, in the Europe region.
How does NOREA, de beroepsorganisatie van IT-auditors make money?
Three revenue lines are on record. Membership Dues are the primary driver. The others are educational Programs and Training and publications and Magazines.
Who are NOREA, de beroepsorganisatie van IT-auditors's main competitors?
Direct peers on record are NBA (Nederlandse Beroepsorganisatie van Accountants), ISACA and ISACA Netherlands Chapter. Broad incumbents are Institute of Internal Auditors (IIA), AICPA and ICAEW (Institute of Chartered Accountants in England and Wales). IAPP (International Association of Privacy Professionals) is listed as an emerging player. APMG International is listed as an others. Regional players are Chartered IIA (UK) and NOREA Belgium / LIIA.
Does NOREA, de beroepsorganisatie van IT-auditors have an API?
No public API is recorded for NOREA, de beroepsorganisatie van IT-auditors.
What industry is NOREA, de beroepsorganisatie van IT-auditors in?
NOREA, de beroepsorganisatie van IT-auditors's product category is Professional Association Services - IT Audit. Its primary akta.pro industry code is HDADAIAF, Audit Management, with a secondary code of BPAHAFAD, Internal Audit & SOX/ICFR Advisory. Its NAICS code is 5416 and its SIC code is 8600.