Government

For Dutch government, the BIO2 is the baseline framework for every layer of government, based on ISO/IEC 27001:2023 and ISO/IEC 27002:2022. Since 15 August 2026, a large part of the BIO2 has been anchored in law through the Cyberbeveiligingswet (Cbw) for government organisations within its scope. Organisations outside the Cbw remain bound to the BIO2 through mandatory self-regulation. The GDPR also applies to the processing of personal data.

A Dutch municipality mainly needs a CISO or security manager, supported by BIO compliance specialists, GRC and IT risk consultants and a privacy officer with public sector experience. Because of the Cyberbeveiligingswet and the BIO2, many municipalities need to redo risk analyses, document measures and prove that they work. That comes on top of day-to-day security operations, so temporary capacity in GRC, information security and security management is often needed.

MVPeople Group responds to every request within 4 hours and, for interim assignments, often presents a first candidate within 4 hours, with introduction CVs within 24 hours. That helps with government tenders where the deadline falls shortly after publication. Candidates come from a network of more than 7,000 pre-screened cybersecurity professionals. MVPeople is NEN-4400-1 certified, WAADI registered and works DBA-proof.

Interim fits a defined assignment, such as a BIO2 catch-up or a transition period after a CISO leaves. If the role is really structural, secondment or a permanent position is the wiser choice, partly because the Dutch Tax Administration has fully enforced the rules on false self-employment since 1 January 2025. For interim work, document what the assignment is, when it ends and how the professional organises the work. Permanent hiring through MVPermanent typically takes 2 to 4 weeks.