Netherlands Baseline Information Security for Government 2 (BIO2)
Part 2, clause 5: Organisational government measures – Netherlands Baseline Information Security for Government 2 (BIO2)

Netherlands Baseline Information Security for Government 2 (BIO2) 5.12.01: Classify information in all systems with an explicit risk assessment and impact methodology

What does 5.12.01 require?

The information in every information system is classified by way of an explicit risk assessment, applying a defined impact classification methodology that belongs to the established risk management methodology.

Maintained by Gerard Blokdyk

Other controls in Part 2, clause 5: Organisational government measures – Netherlands Baseline Information Security for Government 2 (BIO2)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll Netherlands Baseline Information Security for Government 2 (BIO2) controls