Netherlands Baseline Information Security for Government 2 (BIO2)
Part 2, clause 8: Technological government measures – Netherlands Baseline Information Security for Government 2 (BIO2)

Netherlands Baseline Information Security for Government 2 (BIO2) 8.08.05: Automated penetration test at every release of internet-facing systems; annual test; no go-live with unmitigated high risks

What does 8.08.05 require?

Each new release or major update of an internet-facing information system undergoes an obligatory penetration test, automated where possible; should it reveal high-risk issues for which no other mitigation exists, the system may not go into operation. All internet-facing systems are tested for weaknesses and vulnerabilities at least once a year.

Maintained by Gerard Blokdyk

Other controls in Part 2, clause 8: Technological government measures – Netherlands Baseline Information Security for Government 2 (BIO2)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll Netherlands Baseline Information Security for Government 2 (BIO2) controls