Netherlands Baseline Information Security for Government 2 (BIO2)

Part 2, clause 5: Organisational government measures – Netherlands Baseline Information Security for Government 2 (BIO2)

Netherlands Baseline Information Security for Government 2 (BIO2) 5.24.07: Incident procedure: statutory CSIRT reporting, CSIRT notifications and notifying PII principals

What does 5.24.07 require?

The incident procedure states, at a minimum, that the Cybersecurity Incident Response Team receives reports of information security incidents inside the statutory period; that CSIRT notifications are taken in, assessed and fed into risk treatment; and that the people whose PII is affected are told of the incident inside the statutory period.

Maintained by Gerard Blokdyk

Other controls in Part 2, clause 5: Organisational government measures – Netherlands Baseline Information Security for Government 2 (BIO2)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Netherlands Baseline Information Security for Government 2 (BIO2) controls