Baseline Information Security for Government, without detours
The BIO is mandatory for every layer of government and runs through the entire supplier chain. We configure your environment according to the baseline and make sure your accountability holds up.
Mandatory
For every layer of government
ISO basis
Built on 27001 and 27002
Whole chain
Suppliers and partners too
What the BIO means in practice
The Baseline Information Security for Government describes how public bodies handle information security. The baseline follows the structure of ISO 27001 and 27002, filled in with the requirements that apply within government.
The BIO asks more than controls alone: you must be able to explain why a control is set up as it is, and who is responsible for it. That accountability is exactly what we build with you.
Who must meet the BIO?
The baseline applies to government as a whole and to the parties that process data on its behalf.
- Ministries and executive agencies
- Municipalities, provinces and water authorities
- Care and education bodies with a public task
- Public partnerships and alliances
- IT suppliers handling government data
- Chain partners with access
What we work on
We apply the baseline in a way that suits your scale, from a small municipality to a large executive agency.
Security policy
- Approved policy and frameworks
- Roles and responsibilities
- Connection with risk management
Technical controls
- Access management and logging
- Separated networks and data
- Dutch or EU data centres
Accountability
- Audit and self-assessment
- Supplier assessment
- Reporting to the owner
From self-assessment to accountability
We make sure you do not only meet the baseline technically, but can also explain how you meet it.
Self-assessment
We walk through the baseline and determine the status and evidence for every control.
Plan and priorities
Open items receive an owner and a date, aligned with your budget cycle.
Implementation
We build technology and processes and document how they work in daily use.
Audit and upkeep
We support the assessment and keep the baseline current each year.
Meet the BIO without extra workload
Start with the free IT check or book a conversation with an adviser who knows the public sector.
No obligation · response within one business day · knowledge of government frameworks