Netherlands Baseline Information Security for Government 2 (BIO2)
Part 2, clause 8: Technological government measures – Netherlands Baseline Information Security for Government 2 (BIO2)

Netherlands Baseline Information Security for Government 2 (BIO2) 8.15.04: Risk-based retention of logs and SIEM data allowing for long-undetected attackers

What does 8.15.04 require?

How long log files, and data in the SIEM, are kept is decided on risk grounds, allowing for scenarios where an attacker stays undetected for a long time.

Maintained by Gerard Blokdyk

Other controls in Part 2, clause 8: Technological government measures – Netherlands Baseline Information Security for Government 2 (BIO2)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll Netherlands Baseline Information Security for Government 2 (BIO2) controls