ISMS Copilot
BIO

BIO Copilot

Specialist AI guidance for Dutch government information security

What the BIO Copilot Can Do

BIO2 baseline control implementation guidance

Government classification and protection profiles

NEN-ISO 27001/27002 mapping for Dutch context

NIS2-era duties of care through the Cbw and BIO2

Audit preparation for DigiD and BIO assessments

Municipality transition guidance from BIO 1.04zv to BIO2

About BIO Copilot

The Baseline Informatiebeveiliging Overheid (BIO) is the information security baseline for Dutch government organisations, mandatory for government layers and binding on suppliers where procurement contracts incorporate it. The current generation is BIO2 (v1.3, 2026), anchored as the government duty of care by the Cyberbeveiligingswet in force since 15 August 2026, while municipalities complete the transition from BIO 1.04zv. The BIO Copilot helps you work the BIO2 baseline and its ISO 27001/27002 core with the government-specific measures layered on top.

Cross-framework mappings

Working across BIO and another standard? ISMS Mappings is a free public directory of control maps (ISO 27001, SOC 2, NIST, GDPR, and more). A Better ISMS tool, separate from the chat assistant.

Browse free mappings

Frequently Asked Questions

What is the BIO Copilot?

The BIO Copilot is an AI assistant that helps Dutch government organizations and their suppliers comply with the Baseline Informatiebeveiliging Overheid — the mandatory information security baseline for all Dutch government layers.

Is BIO mandatory?

Yes, BIO is mandatory for all Dutch government layers, and suppliers are bound where their contracts incorporate the baseline. BIO2 has applied since 2024 (current version v1.3), and the Cyberbeveiligingswet, in force since 15 August 2026, anchors the government duty of care in BIO2 while municipalities complete the transition from BIO 1.04zv.

How does BIO relate to ISO 27001?

BIO is explicitly based on NEN-EN-ISO/IEC 27001 and 27002 with government-specific baseline controls added. Organizations with ISO 27001 have a strong foundation for BIO compliance.

Ready to do compliance work faster?

Built for speed, accuracy, and audit-ready output.