Tools·Ministerie van BZKNL
Export
Baseline Informatiebeveiliging Overheid (BIO2)
The information security baseline for all Dutch public bodies, BIO2 version 1.3 (January 2026), built on ISO/IEC 27001 and 27002:2022 with government-specific measures. Suppliers to the government are often contracted to meet it.
When to use itYou secure a Dutch government system, or supply one, and must show which measures apply.
- Published by
- Ministerie van BZK (government)
- Written for
- Netherlands
- For
- public bodies, processors
- Cost
- free
- Languages
- Dutch, English
- Provisions
- GDPR Art. 32, NIS2 Art. 21
View the standardbio-overheid.nl
Description by overview.legal; the tool itself is the publisher’s.
How it connects
Other tools for the same task
Standard Standard Data Protection Model (SDM), German DPAs The German supervisory authorities’ method for turning the GDPR’s requirements into technical and organisational measures, through seven protection goals (data minimisation,… DE ·Datenschutzkonferenz (DSK)
Standard NIST Privacy Framework The US National Institute of Standards and Technology’s voluntary framework for managing privacy risk in an organisation, organised in functions (identify, govern, control,… US ·NIST
CNIL CNIL GDPR guide for developers The CNIL’s open guide for developers in eighteen factsheets: identifying personal data, preparing a project, securing the environment and code, minimising collection, managing… developer ·open source
ICO ICO data protection self-assessment checklists Short self-assessment checklists from the UK regulator for small organisations: data protection assurance, information security, direct marketing, records management, data sharing… UK ·checklist
Proton GDPR.eu compliance checklist A plain-language checklist of what a business must have in place under the GDPR: lawful basis and transparency, data security, accountability and governance, privacy rights.… checklist
AEPD Facilita RGPD (AEPD) The Spanish DPA’s questionnaire for businesses that process personal data with little risk (customers, staff, suppliers): from the answers it produces the minimum documents, such… ES ·calculator