CyberFundamentals (CyFun): NIS2 demonstrability without overkill
CyFun is the Belgian self-assessment framework from the Centre for Cybersecurity Belgium (CCB), with three levels (Basic, Important, Essential) offering a more accessible entry point than full ISO 27001 certification for anyone seeking NIS2 demonstrability.
Who is this relevant for?
Looking for NIS2 demonstrability, pragmatically
SMEs that need to demonstrate NIS2 compliance, but don't want to launch a full ISO 27001 certification track right away.
A client or contracting authority asks for a level
A client or public tender requires demonstrability at a specific CyFun level (Basic, Important or Essential).
Unsure which framework to start with
Organisations that aren't sure whether NIS2, CyFun or ISO 27001 is the right starting point, and want pragmatic advice first.
What Millecam does
A GAP analysis against the chosen or still-to-be-determined CyFun level (Basic, Important or Essential) maps out where you stand today. This comes with honest advice on which level is realistic and sufficient for the organisation's actual risks and obligations (not automatically the highest), followed by a prioritised remediation plan.
What you actually get
- GAP analysis against the chosen CyFun level (Basic, Important or Essential)
- A substantiated level determination: which level fits the organisation's risks and obligations
- A prioritised remediation roadmap
- Policy and procedure documentation aligned with the chosen level
- Support with the self-assessment and any verification
- Where relevant: a clear bridge to broader NIS2 demonstrability
How a CyberFundamentals track unfolds
Step 1
GAP analysis & level determination
Where you stand today, and which level is realistic.
Step 2
Remediation
Findings translated into concrete measures and documentation.
Step 3
Self-assessment
Support in completing and, where applicable, verifying the self-assessment.
Result
Demonstrable compliance at the level that actually matters, without wasting time and budget on a heavier track than necessary.
Why Millecam
One fixed point of contact, no rotating team. Direct contact with whoever does the work: no junior consultant, no escalation chain. More about Robin.
Ready to get started?
A no-obligation thirty-minute conversation is enough to determine whether, and how, Millecam can help.
Discuss your CyberFundamentals track