Voluntary commitment

Baseline Informatiebeveiliging Overheid (BIO2), Netherlands

The Netherlands' baseline of minimum information security requirements for government bodies and, through procurement conditions, their suppliers; version 1.3 of the measures is available.

  • 2requirementsin our own words
  • 0editions none dated yet
  • 1places where it is a duty of 30 assessed
  • 18 Oct 2026last checkedat the sources below

Where it applies

It is a duty in 1 of 30 places. The outcome holds under the conditions shown and says nothing about any one site.

WhereOutcomeBasisConditionsAuthority and route
NetherlandsAppliesRequired by contract or customer In forceNone stated National scheme used by public bodies and their suppliers in this country.Dutch government (BIO programme)
Austria, Belgium, Bulgaria, Switzerland, Cyprus, Czechia, Germany, Denmark, Estonia, Spain, Finland, France, United Kingdom, Greece, Croatia, Hungary, Ireland, Italy, Lithuania, Luxembourg, Latvia, Malta, Norway, Poland, Portugal, Romania, Sweden, Slovenia, SlovakiaDoes not applyVoluntary In forceNone stated National scheme of NL.Not stated

What it asks for

2 requirements, each in our own words with the evidence an assessor would expect and who on a site usually owns it. Read the clause itself on the scheme owner's page.

RequirementEvidence expectedOwnerWhen
Meet the baseline measures when serving Dutch government clients. Measure mapping Policy, checked by document reviewSecurity lead Every year Governance, the organisation
Expect procurement conditions built from the baseline. Tender security requirements Contract, checked by document reviewProcurement On each change Contractual, the organisation

About the programme

Assessed by
Self-declaration
Scope
government organisation or supplier information system
Validity
Not applicable.
Accreditation route
none
Who asks for it
Public tenders
Where it is used
NL

Sources

Official bodies behind this page, each with the date we last read it.

No official body publishes a page for this scheme. The scheme owner's own page, linked under About the programme, is where the clauses are published.

Not legal advice. Confirm each duty against the text itself.