Netherlands Baseline Information Security for Government...

What does P1-9 require?

Each government organisation reports its information security status to the supervisory authorities concerned through whatever accountability framework applies; its annual report carries information security as a standing item; and, so that they can cooperate securely, government organisations inform one another about the measures they have taken by means of a Statement of Applicability.

Other controls in Part 1: BIO2 framework (obligations, management system, risk management, governance) – Netherlands Baseline Information Security for Government 2 (BIO2)

P1-11.1a Mandatory application of the BIO under the Cybersecurity Act and board responsibilities
P1-11.1b Board and staff training and notification of significant incidents
P1-12.2 Line management owns information systems and applies the measures
P1-12.3 CISO role
P1-13 Pass BIO obligations to suppliers in purchase requirements
P1-16 Determine additional measures by type of information
P1-17 Assess incident impact across the required impact areas
P1-4a Establish an ISMS to NEN-EN-ISO/IEC 27001 that covers at least the critical processes and systems

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Netherlands Baseline Information Security for Government 2 (BIO2) controls