Netherlands Baseline Information Security for Government 2 (BIO2)
Part 2, clause 5: Organisational government measures – Netherlands Baseline Information Security for Government 2 (BIO2)

Netherlands Baseline Information Security for Government 2 (BIO2) 5.30.02: Identify critical systems in the asset inventory and update at least every three years

What does 5.30.02 require?

In the inventory kept under NEN-EN-ISO/IEC 27002:2022 control 5.12, the process owner marks out the critical systems, using the established risk management methodology together with an explicit risk assessment, and refreshes that overview no less often than every three years.

Maintained by Gerard Blokdyk

Other controls in Part 2, clause 5: Organisational government measures – Netherlands Baseline Information Security for Government 2 (BIO2)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.