The Government Information Security Baseline (BIO) is the standard for information security within the Dutch government. The BIO is based on the international ISO 27001-information security standard and has replaced the various sectoral baselines, such as the BIR (Baseline Information Security National Service), BIG (Baseline Information Security Municipalities), and IBI (Information Security Baseline Interprovincial Consultation), since 1 January 2020.

The BIO defines three baseline security levels: BBN1, BBN2, and BBN3, where BBN1 is the minimum level that information systems must meet. For municipalities, there is also an additional level on top of BBN2, called BBN2+, as it may be necessary for municipalities to implement additional measures.

The purpose of the BIO is to provide a uniform standard that ensures consistency and a high level of information security across all government agencies. This helps minimize the risks of data breaches and cyberattacks. For organizations that do business with the government or manage sensitive data, it is important to understand and apply the BIO.

The Government Information Security Baseline (BIO) is an essential standard for government organizations and companies that work with sensitive data. By complying with the BIO guidelines, you ensure that your organization is protected against the increasing threats in the digital world.

Compliance with the BIO is mandatory for government organizations. For organizations that work with the government or that have access to sensitive government data, it may be desirable to have a BIO audit carried out. A BIO audit is possible when the company has determined its BBN level (BBN1, BB2 or BBN3).