Netherlands Baseline Information Security for Government 2 (BIO2)
Part 1: BIO2 framework (obligations, management system, risk management, governance) – Netherlands Baseline Information Security for Government 2 (BIO2)

Netherlands Baseline Information Security for Government 2 (BIO2) P1-7: Statement of Applicability with BIO measures and an exceptions annex

What does P1-7 require?

Entities draw up a Statement of Applicability as NEN-EN-ISO/IEC 27001 requires, listing the selected controls and explaining which have been implemented, and must additionally include the BIO government measures explicitly. Every deviation, and every control that does not apply, must be recorded in an annex entitled SoA Exceptions, with the reference to the supporting risk assessment.

Maintained by Gerard Blokdyk

Other controls in Part 1: BIO2 framework (obligations, management system, risk management, governance) – Netherlands Baseline Information Security for Government 2 (BIO2)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll Netherlands Baseline Information Security for Government 2 (BIO2) controls