Zelfevaluatie Normenkader IBP
Also known as self-evaluation, nulmeting, baseline measurement, zelfevaluatie
What is the zelfevaluatie of the Normenkader IBP?
The zelfevaluatie is a school board's own assessment of the maturity level it has reached on each norm of the Normenkader IBP. It is the baseline (nulmeting) from which the board plans its route to level 3, and the government expects every board to have one, with a plan, by 1 January 2027.
Defined in / by
Last updated: 14 October 2026.
The 2027 checkpoint
The Rijksoverheid states that from 1 January 2027 schools must know where they stand against the Normenkader through a self-evaluation, and must have a plan to meet all norms. The State Secretary's letter of 5 November 2025 puts it as "in 2027". The self-evaluation is therefore the first deliverable of the Normenkader IBP, three years before the norms themselves must be met in 2030.
A board can do it in several ways. The VO-raad guidance of 4 March 2026 lists a board's own baseline, an external adviser, GRC tooling, or the free Zelfevaluatie Normenkader IBP tool. The VO-raad announced on 9 September 2025 that a new self-evaluation tool would be available from the end of that month.
Self-evaluations also feed the national picture. The IBP in beeld survey, published in March 2026, drew on anonymised self-evaluations from 485 school boards, about 40% of the sector, collected between 24 December 2025 and 16 January 2026. They put the average at 1.7 out of 5.
The weakness is in the name. A self-evaluation is not validated by anyone else, and the survey notes that it measured how measures are designed, not whether they work. A board that wants its baseline to hold up later, in a conversation with the Inspectie van het Onderwijs or its own internal supervisor, does well to keep the evidence behind each score.
Questions and answers
When must a school board have done its zelfevaluatie of the Normenkader IBP?
By 1 January 2027, according to the Rijksoverheid, together with a plan to meet all norms of the Normenkader IBP. The State Secretary for Education's letter of 5 November 2025 gives the year as 2027.
Who checks the zelfevaluatie of the Normenkader IBP?
No one validates it formally. It is a self-assessment by the school board. The Inspectie van het Onderwijs can discuss the board's plan in its stimulating role, and digital safety is part of the internal supervision of the board.
Sources
- Veilige en goede ict in het onderwijsRijksoverheid
- Kamerbrief Digitale veiligheid in het funderend onderwijs (29 240, nr. 177)Tweede Kamer · 5 November 2025
- Digitale veiligheid: dit vraagt 2026 van schoolbesturenVO-raad · 4 March 2026
- Start met een zelfevaluatie van het Normenkader IBPVO-raad · 9 September 2025
- IBP in beeld: a survey of maturity against the Normenkader IBPProgramma Digitaal Veilig Onderwijs, via Eerste Kamer · 2 April 2026
Regulations
Normenkader Informatiebeveiliging en Privacy (Normenkader IBP)
The Normenkader IBP is the Dutch framework of 69 information security and 25 privacy norms for primary, secondary and special education. Each school board must know where it stands by 1 January 2027 and meet maturity level 3 on every norm in 2030. It is a policy agreement, not an act.
NextEvery board knows its position against the Normenkader through a self-evaluation, and has a plan to meet all norms