Compliance2 min readUpdated on , published on
BIO and BIO2 in brief
BIO and BIO2: the framework of standards for information security at Dutch government organisations, with technical measures and evidence on request.
What this page is
The Baseline Informatiebeveiliging Overheid (BIO) is the framework of standards for information security at Dutch government organisations. BIO2 (version 1.3) is based on ISO 27001:2023 and ISO 27002:2022 and replaces the old BIO. The BIO is the framework of your organisation.
What Noveu gives you today
- Quick scan of your current situation, with an action plan
- Evidence on request: technical and organisational measures for your auditor
- Technical measures per topic on the pages /compliance, /security and /nta-7516
- The public list of sub-processors on the sub-processors page
Classification
The old BIO had three basic security levels; BIO2 replaces them with a risk assessment per organisation.
Read more
- BlogBIO checklist: ten measures that municipalities often leave undonePer measure what you do this month, for information security officers and ENSIA coordinators.
- BlogPreparing your audit in five stepsAn evidence calendar, so that the evidence is ready when the auditor asks for it.
- BlogWhat the CLOUD Act means for a municipality on Microsoft 365With sources, so that you can explain it to the board and the auditor.
What is your next step?
Want to know what this looks like for your organisation? See how Noveu approaches it, or schedule a conversation.