Netherlands Baseline Information Security for Government 2 (BIO2)
Part 2, clause 5: Organisational government measures – Netherlands Baseline Information Security for Government 2 (BIO2)

Netherlands Baseline Information Security for Government 2 (BIO2) 5.23.01: Cloud service provider policy covering inventory to termination, reviewed every three years

What does 5.23.01 require?

The entity sets, and applies, a policy for overseeing how cloud service providers are inventoried, classified, selected, assessed and managed and how their services are ended, reviewed at least every three years; purchasing contracts state which situations may lead to termination, and when a supplier undergoes major changes the associated risks are assessed and suitable measures taken.

Maintained by Gerard Blokdyk

Other controls in Part 2, clause 5: Organisational government measures – Netherlands Baseline Information Security for Government 2 (BIO2)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll Netherlands Baseline Information Security for Government 2 (BIO2) controls