Skip to content
Information SecurityNetherlands

Netherlands Baseline Information Security for Government 2 (BIO2)

What is Netherlands Baseline Information Security for Government 2 (BIO2)?

The Netherlands' mandatory government information security baseline: an ISO/IEC 27001-based management system, risk and accountability duties under the Cybersecurity Act, supplier requirements, and 117 government measures that set the obligatory minimum implementation of the ISO/IEC 27002:2022 controls for public bodies. It comprises 132 controls organised across 5 domains, and applies in the Netherlands.

Map this against the frameworks you already hold

The compliance knowledge graph holds cross-framework control mappings for hundreds of standards, including the ones you are likely to be certified against already.

Browse the framework graph →

Where Netherlands Baseline Information Security for Government 2 (BIO2) overlaps with the standards you already hold

Netherlands Baseline Information Security for Government 2 (BIO2) vs ISO 27001:2022View comparison →Netherlands Baseline Information Security for Government 2 (BIO2) vs SOC 2View comparison →Netherlands Baseline Information Security for Government 2 (BIO2) vs NIST CSF 2.0View comparison →Netherlands Baseline Information Security for Government 2 (BIO2) vs GDPRView comparison →Netherlands Baseline Information Security for Government 2 (BIO2) vs HIPAAView comparison →Netherlands Baseline Information Security for Government 2 (BIO2) vs PCI DSS 4.0View comparison →

What Netherlands Baseline Information Security for Government 2 (BIO2) means in your sector

Netherlands Baseline Information Security for Government 2 (BIO2) for Healthcare→Netherlands Baseline Information Security for Government 2 (BIO2) for Financial Services→Netherlands Baseline Information Security for Government 2 (BIO2) for Technology→Netherlands Baseline Information Security for Government 2 (BIO2) for Government→Netherlands Baseline Information Security for Government 2 (BIO2) for Manufacturing→Netherlands Baseline Information Security for Government 2 (BIO2) for Energy→Netherlands Baseline Information Security for Government 2 (BIO2) for Retail→Netherlands Baseline Information Security for Government 2 (BIO2) for Education→

What Netherlands Baseline Information Security for Government 2 (BIO2) means for your job

Netherlands Baseline Information Security for Government 2 (BIO2) for CISOs→Netherlands Baseline Information Security for Government 2 (BIO2) for Compliance Officers→Netherlands Baseline Information Security for Government 2 (BIO2) for Risk Managers→Netherlands Baseline Information Security for Government 2 (BIO2) for IT Directors→Netherlands Baseline Information Security for Government 2 (BIO2) for DPOs→Netherlands Baseline Information Security for Government 2 (BIO2) for Auditors→

Questions people ask about Netherlands Baseline Information Security for Government 2 (BIO2)

What is Netherlands Baseline Information Security for Government 2 (BIO2)?
The Netherlands' mandatory government information security baseline: an ISO/IEC 27001-based management system, risk and accountability duties under the Cybersecurity Act, supplier requirements, and 117 government measures that set the obligatory minimum implementation of the ISO/IEC 27002:2022 controls for public bodies.
How many controls does Netherlands Baseline Information Security for Government 2 (BIO2) have?
Netherlands Baseline Information Security for Government 2 (BIO2) contains 132 controls organized across 5 domains.
Where does Netherlands Baseline Information Security for Government 2 (BIO2) apply?
Netherlands Baseline Information Security for Government 2 (BIO2) applies in Netherlands. Organizations operating in or serving customers in this jurisdiction should check whether its requirements reach them.
Which version of Netherlands Baseline Information Security for Government 2 (BIO2) is covered here?
This page covers BIO2 version 1.3 final, 9 January 2026 (English translation; Dutch text binding).

Query Netherlands Baseline Information Security for Government 2 (BIO2) programmatically

Netherlands Baseline Information Security for Government 2 (BIO2), its 132 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.

Netherlands Baseline Information Security for Government 2 (BIO2) API reference and MCP config →

How ready are you for Netherlands Baseline Information Security for Government 2 (BIO2)?

Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.

Get Your Readiness Report, from $49Explore Platform Free
Written and maintained by Gerard Blokdyk, The Art of Service.Last updated .