Netherlands Baseline Information Security for Government 2 (BIO2)
Part 2, clause 5: Organisational government measures – Netherlands Baseline Information Security for Government 2 (BIO2)

Netherlands Baseline Information Security for Government 2 (BIO2) 5.22.01: Process owner reviews supplier compliance annually and treats the risks

What does 5.22.01 require?

Based on the evidence the supplier provides under 5.20.03, the process owner is responsible for reviewing each year whether the supplier complies with the information security requirements, for defining any security risks, and for taking or commissioning mitigating measures and accepting residual risks.

Maintained by Gerard Blokdyk

Other controls in Part 2, clause 5: Organisational government measures – Netherlands Baseline Information Security for Government 2 (BIO2)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll Netherlands Baseline Information Security for Government 2 (BIO2) controls