What does 6.03.03 require?

At appointment, at internal transfer and at moments such as team meetings or performance reviews, management stresses to employees and contractors the importance of information security education and training and actively encourages them to attend periodically.

Netherlands Baseline Information Security for Government...

Other controls in Part 2, clause 6: People government measures – Netherlands Baseline Information Security for Government 2 (BIO2)

6.01.01 Established screening policy, with Certificate of Conduct on a risk basis
6.02.01 Staff made aware of their security responsibilities on joining or changing roles, with easy access to the rules
6.03.01 Everyone shares responsibility and knows the rules, including for classified environments
6.03.02 Security awareness training completed within three months of appointment
6.03.04 Secure mobile working behaviour in awareness programmes
6.08.01 All staff demonstrably informed of the incident notification procedure

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Netherlands Baseline Information Security for Government 2 (BIO2) controls