Netherlands Baseline Information Security for Government 2 (BIO2)
Part 1: BIO2 framework (obligations, management system, risk management, governance) – Netherlands Baseline Information Security for Government 2 (BIO2)

Netherlands Baseline Information Security for Government 2 (BIO2) P1-4b: Select controls from NEN-EN-ISO/IEC 27002 plus the mandatory government measures

What does P1-4b require?

When the entity formulates its controls it must draw on NEN-EN-ISO/IEC 27002 and on the BIO's mandatory government measures together, taking account of the environments to which the information security risks apply as the scope and the identified risks dictate. Where it is necessary and the result is equivalent, controls from other standards and guidelines (NEN 7510 for healthcare information, the CSIR and IEC 62443 for operational technology) may replace, or be combined with, the controls of ISO/IEC 27002 and the BIO measures.

Maintained by Gerard Blokdyk

Other controls in Part 1: BIO2 framework (obligations, management system, risk management, governance) – Netherlands Baseline Information Security for Government 2 (BIO2)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll Netherlands Baseline Information Security for Government 2 (BIO2) controls