Cyver core supports the DigiD 2.0 checklist, which outlines the requirements for the essential identification system, provided by the Dutch government. This framework is critical for all service providers integrated with DigiD to ensure the security of their web applications and underlying infrastructure.
General Information on the DigiD
DigiD enables Dutch citizens and businesses to securely access online government services. The security of this system is guaranteed through stringent rules and standards.
These security requirements are largely aligned with the guidelines of the NCSC (National Cyber Security Centre) and the Baseline Informatiebeveiliging Overheid (BIO), the Government's Basic Information Security Standard. This mandates that every organization integrated with DigiD adheres to the highest national standards set for protecting sensitive public data.
What is DigiD?
This framework is a set of standards and norms used to audit the Information and Communication Technology (ICT) security of parties connecting to DigiD. Penetration tests and security audits are conducted based on these norms.
Download
You can directly download the latest DigiD Checklists from our GitHub repository:
DigiD 2.0
DigiD 2.0 - Pentest only