What does 6.01.01 require?

Every entity has its own established screening policy; when someone starts work or changes job, a risk assessment decides whether a Certificate of Conduct (VOG) is requested.

Netherlands Baseline Information Security for Government...

Other controls in Part 2, clause 6: People government measures – Netherlands Baseline Information Security for Government 2 (BIO2)

6.02.01 Staff made aware of their security responsibilities on joining or changing roles, with easy access to the rules
6.03.01 Everyone shares responsibility and knows the rules, including for classified environments
6.03.02 Security awareness training completed within three months of appointment
6.03.03 Management promotes and encourages periodic security training
6.03.04 Secure mobile working behaviour in awareness programmes
6.08.01 All staff demonstrably informed of the incident notification procedure

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Netherlands Baseline Information Security for Government 2 (BIO2) controls