The IBP working group focuses on further developing agreements related to information security and privacy. The [ROSA Certification Scheme for Information Security and Privacy](https://www.edustandaard.nl/standaard_afspraken/certificeringsschema-informatiebeveiliging-en-privacy-rosa/certificeringsschema-informatiebeveiliging-en-privacy-rosa-v3-0/) and the [SURF Security Baseline](https://www.edustandaard.nl/standaard_afspraken/surf-security-baseline/surf-security-baseline-v1-0/) are examples of this. The certification scheme is designed for organizations that provide ICT services in the education sector.