# Baseline Informatiebeveiliging Overheid (BIO2)

- Type: Tools
- Source: Ministerie van BZK
- Date: 2026-11-11
- Original: https://www.bio-overheid.nl/
- Canonical: https://overview.legal/posts/628503
- Topics: Controllers, Processors, Public Authority

## Summary

The information security baseline for all Dutch public bodies, BIO2 version 1.3 (January 2026), built on ISO/IEC 27001 and 27002:2022 with government-specific measures. Suppliers to the government are often contracted to meet it.

## Full text

The information security baseline for all Dutch public bodies, BIO2 version 1.3 (January 2026), built on ISO/IEC 27001 and 27002:2022 with government-specific measures. Suppliers to the government are often contracted to meet it.

When to use it: You secure a Dutch government system, or supply one, and must show which measures apply.
Provisions: GDPR Art. 32, NIS2 Art. 21.
Published by Ministerie van BZK (government), for Netherlands.
For: public bodies, processors.
Free; available in Dutch, English.

Het normenkader voor informatiebeveiliging van alle Nederlandse overheden, BIO2 versie 1.3 (januari 2026), gebouwd op ISO/IEC 27001 en 27002:2022 met overheidsspecifieke maatregelen. Leveranciers van de overheid moeten er vaak contractueel aan voldoen.

Wanneer gebruiken: Je beveiligt een overheidssysteem of levert er een, en moet laten zien welke maatregelen gelden.

---
Generated by overview.legal · https://overview.legal/posts/628503 · 2026-11-14