Netherlands Baseline Information Security for Government 2 (BIO2)
Part 1: BIO2 framework (obligations, management system, risk management, governance) – Netherlands Baseline Information Security for Government 2 (BIO2)

Netherlands Baseline Information Security for Government 2 (BIO2) P1-6.2: Apply a risk management methodology with the required components

What does P1-6.2 require?

The entity picks, and then applies, a risk management methodology compliant with NEN-EN-ISO/IEC 27001 that has at least these components: a quick scan deciding whether the basic level is enough or extra measures are needed, in the course of which information systems are classified; a full risk assessment method from which extra measures follow; a risk register holding the risks temporarily accepted; and a risk monitoring process that structurally resolves temporarily accepted risks.

Maintained by Gerard Blokdyk

Other controls in Part 1: BIO2 framework (obligations, management system, risk management, governance) – Netherlands Baseline Information Security for Government 2 (BIO2)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll Netherlands Baseline Information Security for Government 2 (BIO2) controls