---
title: "Groeipad"
description: "The Groeipad orders the Normenkader IBP's norms into five phases and 40 subprojects, so a school board can work towards maturity level 3 as a project."
canonical: "https://gencompl.ai/glossary/groeipad-normenkader-ibp"
language: "en-US"
type: "Glossary term"
published: "2026-10-14T18:25:38.287Z"
modified: "2026-10-14T19:18:58.807Z"
---

# Groeipad

The Groeipad is Kennisnet's step-by-step route to maturity level 3 of the Normenkader IBP. It groups all norms into five phases and 40 subprojects, ordered by what has to come first and by how much each norm lowers risk. A school board can start at any phase.

Also known as: growth path, Normenkader IBP Groeipad

**What is the Groeipad of the Normenkader IBP?**

Defined in: [Normenkader IBP](https://gencompl.ai/regulations/normenkader-ibp)

[Home](https://gencompl.ai/) › [Glossary](https://gencompl.ai/glossary) › Groeipad

The Groeipad is Kennisnet's step-by-step route to maturity level 3 of the Normenkader IBP. It groups all norms into five phases and 40 subprojects, ordered by what has to come first and by how much each norm lowers risk. A school board can start at any phase.

## Defined in / by

- [Normenkader IBP, Groeipad (Kennisnet)](https://normenkaderibp.kennisnet.nl/groeipad/)

Last updated: 14 October 2026.

## The five phases

| Phase | Name | Subprojects | Aim |
| --- | --- | --- | --- |
| 1 | Inrichten | 7 | Set up the preconditions: roles, decisions, planning |
| 2 | Ontwikkelen | 11 | Cover the largest risks first |
| 3 | Uitbreiden | 6 | Extend the measures |
| 4 | Verfijnen | 7 | Refine, once the main risks are handled |
| 5 | Optimaliseren | 9 | Optimise measures and processes |

## A project plan, not a second framework

The Groeipad adds no norms. It takes the 94 norms of the Normenkader IBP and puts them in an order, so a board does not face them as one undifferentiated list. Kennisnet built the order on two factors: which norms have to be in place before others make sense, and how much each norm reduces risk. Phase 2 is the largest, with 11 subprojects aimed at the biggest risks.

The phases match the way government expects boards to work. By 1 January 2027 a board must know its position through a self-evaluation and have a plan for meeting all norms, according to the [Rijksoverheid](https://www.rijksoverheid.nl/onderwerpen/digitalisering-onderwijs/veilige-en-goede-ict-in-het-onderwijs). The [PO-Raad, VO-raad and Kennisnet guidance of 4 March 2026](https://vo-raad.nl/nieuws/digitale-veiligheid-dit-vraagt-2026-van-schoolbesturen) tells boards to base that plan on their baseline measurement and to reach level 3 by the end of 2029. The Groeipad is the obvious skeleton for such a plan, though nothing obliges a board to use it.

Kennisnet maintains the Groeipad separately from the norms. Its changes page records several moves of norms between subprojects, while it states the norms themselves have not changed since 6 June 2024. A board that built its plan on an older version of the Groeipad should check whether its subprojects still hold the same norms.

> **What we could not establish**
>
> The definition above is our own wording. Kennisnet publishes the Normenkader IBP and its begrippenlijst, and its terms allow its texts to be reused only for non-commercial purposes, so we describe the term rather than quote it. Read Kennisnet's page for the framework's own text.

## Questions and answers

### Is the Groeipad mandatory under the Normenkader IBP?

No. The Groeipad is a support tool from Kennisnet for planning the route to maturity level 3. School boards must have a plan to meet all norms, but they may structure it as they see fit.

### How many phases and subprojects does the Groeipad have?

Five phases with 40 subprojects in total: Inrichten (7), Ontwikkelen (11), Uitbreiden (6), Verfijnen (7) and Optimaliseren (9), according to Kennisnet.

## Sources

- [Normenkader IBP: Groeipad](https://normenkaderibp.kennisnet.nl/groeipad/) (Kennisnet)
- [Veilige en goede ict in het onderwijs](https://www.rijksoverheid.nl/onderwerpen/digitalisering-onderwijs/veilige-en-goede-ict-in-het-onderwijs) (Rijksoverheid)
- [Digitale veiligheid: dit vraagt 2026 van schoolbesturen](https://vo-raad.nl/nieuws/digitale-veiligheid-dit-vraagt-2026-van-schoolbesturen) (VO-raad · 4 March 2026)
- [Normenkader IBP: changes](https://normenkaderibp.kennisnet.nl/wijzigingen/) (Kennisnet)

## Related content

### Regulation

- [Normenkader Informatiebeveiliging en Privacy (Normenkader IBP)](https://gencompl.ai/regulations/normenkader-ibp): The Normenkader IBP is the Dutch framework of 69 information security and 25 privacy norms for primary, secondary and special education. Each school board must know where it stands by 1 January 2027 and meet maturity level 3 on every norm in 2030. It is a policy agreement, not an act.