BIO and BIO2
The Baseline Informatiebeveiliging Overheid (Dutch Government Information Security Baseline) is the mandatory security framework for Dutch central and local government, based on ISO 27001/27002 with government-specific measures.
About this standard
BIO and BIO2 in brief
The BIO translates ISO 27002 into Dutch government practice, with mandatory measures per baseline security level. Its successor BIO2 aligns with the 2022 revision of ISO 27002 and is already included in the library alongside BIO 1.04.
Dutch municipalities account for the BIO through ENSIA. The library links BIO measures to the shared control set, and GRIP supports the full ENSIA accountability process.
In the library
Verified counts
138 controls
Baseline Informatiebeveiliging Overheid v1.04zv (ISO 27002:2017-basis) (version 1.04).
122 controls
Baseline Informatiebeveiliging Overheid 2 (v1.3, ISO 27002:2022-basis) (version 2.0).
621 links
To 88 shared controls, the bridge to other frameworks.
41 frameworks
This standard does not stand alone: the library counts 1,807 controls and 2,224 cross-references.
Structure
Domains in BIO 1.04
- Beveiliging bedrijfsvoering (24)
- Toegangsbeveiliging (23)
- Incidentbeheer (12)
- Leveranciersrelaties (11)
- Fysieke beveiliging (10)
- Organiseren van IB (9)
- Communicatiebeveiliging (9)
- Beheer bedrijfsmiddelen (9)
- Naleving (8)
- Acquisitie/ontwikkeling/onderhoud (8)
Related standards
ISO 27001 · NIS2 and the Dutch Cybersecurity Act · GDPR · DORA · NEN 7510 · ISO 42001 · Wpg (Dutch Police Data Act) · All standards
Get started with BIO and BIO2
Request a demo or see how CRAFT supports this standard.
Frequently asked questions
Who is the BIO mandatory for?
For the entire Dutch government: central government, municipalities, provinces and water authorities. The BIO is the joint baseline framework for information security, based on ISO 27001 and 27002.
What changes with BIO2?
BIO2 aligns with the 2022 revision of ISO 27002, with an updated set of measures and more emphasis on risk management. The Audirium library holds BIO 1.04 and BIO2 side by side, making the difference visible per measure.
How does the BIO relate to ENSIA?
ENSIA is the accountability system through which Dutch municipalities report annually on the BIO, among other things. GRIP, Audirium's ENSIA app, supports that accountability from self-assessment to board statement.