The SURF Security Baseline is a set of measures for information security. The aim of this set is to ensure that both new and existing systems and applications within SURF members (educational institutions) meet a minimum security level. The baseline must also apply to systems that are purchased, either by the institution itself or by SURF, possibly on behalf of the sector (tenders).