As a government or municipal organisation, you process sensitive citizen data and operate critical public infrastructure. NIS2, BIO, AVG and DigiD impose strict obligations — with direct enforcement from 2024.
The BIO baseline requires annual risk assessments, incident procedures and supplier management. DigiD audits demand proof of technical controls. NIS2 adds incident reporting within 24 hours. AVG violations carry fines up to €20M.