Netherlands Baseline Information Security for Government 2 (BIO2)
Part 2, clause 5: Organisational government measures – Netherlands Baseline Information Security for Government 2 (BIO2)

Netherlands Baseline Information Security for Government 2 (BIO2) 5.20.04: Entity's own investigations, including the option of an external audit, and treatment of residual risk

What does 5.20.04 require?

The entity independently conducts investigations, also to validate the reports the supplier provides, and the contract states in terms that an external audit may be carried out; residual risks that follow are controlled through the entity's established risk management methods.

Maintained by Gerard Blokdyk

Other controls in Part 2, clause 5: Organisational government measures – Netherlands Baseline Information Security for Government 2 (BIO2)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll Netherlands Baseline Information Security for Government 2 (BIO2) controls