The IBP working group focuses on further developing agreements related to information security and privacy. The ROSA Certification Scheme for Information Security and Privacy and the SURF Security Baseline are examples of this. The certification scheme is designed for organizations that provide ICT services in the education sector.