Netherlands Baseline Information Security for Government 2 (BIO2)
Part 2, clause 5: Organisational government measures – Netherlands Baseline Information Security for Government 2 (BIO2)

Netherlands Baseline Information Security for Government 2 (BIO2) 5.33.01: Retention periods set in selection lists, implemented and tested

What does 5.33.01 require?

The process owner has written the retention periods of every kind of information and every information system into selection lists, having regard to what the entity aims to do and to law and regulation, the Public Records Act and privacy rules among them, has implemented those periods in practice and periodically tests their effectiveness.

Maintained by Gerard Blokdyk

Other controls in Part 2, clause 5: Organisational government measures – Netherlands Baseline Information Security for Government 2 (BIO2)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.