Netherlands Baseline Information Security for Government 2 (BIO2)
Part 2, clause 5: Organisational government measures – Netherlands Baseline Information Security for Government 2 (BIO2)

Netherlands Baseline Information Security for Government 2 (BIO2) 5.21.05: Include supply chain security in the entity's risk analysis

What does 5.21.05 require?

The security of supply chains is included in the entity's risk analysis, which looks at the particular vulnerabilities of each direct supplier and each service provider, at the overall quality of their products, and at the cybersecurity practices of their own suppliers and service providers including secure development procedures.

Maintained by Gerard Blokdyk

Other controls in Part 2, clause 5: Organisational government measures – Netherlands Baseline Information Security for Government 2 (BIO2)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll Netherlands Baseline Information Security for Government 2 (BIO2) controls