DigiD Normenkader Copilot
Navigate the DigiD ICT-beveiligingsassessment normenkader with confidence
What the DigiD Normenkader Copilot Can Do
Orient across the 21 norms and the B, U, and C domains
Identify which norms require werking evidence over a 6-month period
Map existing controls to specific norms such as U/WA.03 and U/NW.03
Navigate the distinction between opzet, bestaan, and werking assessments
Draft a hardening guideline structure aligned with U/PW.07 and U/NW.06
Track third-party security requirements relevant to norm B.05
About DigiD Normenkader Copilot
The DigiD Normenkader 3.0 sets out 21 mandatory security norms for all organisations connected to the Dutch DigiD authentication service, assessed annually by a NOREA-registered auditor. ISMS Copilot helps you understand each norm, map your controls, and prepare for both opzet/bestaan and werking assessments.
Cross-framework mappings
Working across DigiD Normenkader and another standard? ISMS Mappings is a free public directory of control maps (ISO 27001, SOC 2, NIST, GDPR, and more). A Better ISMS tool, separate from the chat assistant.
Browse free mappingsFrequently Asked Questions
What is the DigiD Normenkader?
The Norm ICT-beveiligingsassessments DigiD (versie 3.0) is a mandatory annual security framework published by Logius on behalf of the Dutch Ministry of the Interior (MinBZK), covering 21 norms across policy, web application security, platform security, network security, and monitoring for all organisations connected to DigiD.
How does the DigiD Normenkader Copilot help?
Copilot helps you orient across the norms, understand the opzet, bestaan, and werking evidence model, and prepare assessment documentation before your NOREA auditor engagement. The Logius normenkader carries the normative detail.
Which norms are assessed on operating effectiveness (werking)?
Five norms: U/TV.01, U/WA.02, C.07, C.08, and C.09: are assessed not only on design and existence but also on werking (operating effectiveness) over a mandatory 6-month control period, in addition to the opzet en bestaan assessment applied to all norms in scope.
Ready to do compliance work faster?
Built for speed, accuracy, and audit-ready output.