After the Focus Cyber diagnostic
NIS 2 and CyberFundamentals: know where you stand and what to do next
Even if the law does not apply to you directly, your clients subject to NIS 2 will ask for assurances. We help you respond using the Belgian CyFun framework, without overinvesting.
30 minutes, no commitment.
Not had the diagnostic yet? It is the recommended starting point.
The situation
The NIS 2 law has expanded the number of businesses in scope. Many SMEs encounter it indirectly: a security questionnaire from a client, a contractual clause or a question from their insurer. The CyberFundamentals (CyFun) framework, published by the Centre for Cybersecurity Belgium, provides a structured, proportionate response. Its 2025 version also places greater emphasis on the supply chain.
What we do
Applicability analysis
Essential entity, important entity or supplier to an entity in scope? We clarify your position.
Choosing the CyFun level
Basic, Important or Essential. The right level depends on your actual exposure to threats.
CyFun self-assessment
Your maturity assessed measure by measure, together with your teams.
Roadmap
Actions ranked by priority, with estimated effort and budget.
Preparing for verification
An evidence file ready for the conformity assessment body.
Client questionnaires
Solid answers to your clients’ security requirements.
How it works
1
Clarify
Your NIS 2 status and target CyFun level.
2
Assess
A guided self-assessment, without jargon.
3
Prioritise
A realistic roadmap, adapted to your resources.
4
Demonstrate
Preparation for verification or for responding to your clients.
What you get
- A clear position on your NIS 2 status
- The CyFun level suited to your situation
- A documented maturity score
- A prioritised roadmap
- Concrete arguments for your clients and insurer
CyFun or ISO 27001? Both are recognised in Belgium. CyFun is more direct and quicker to implement. ISO 27001 is internationally recognised. We help you choose according to your clients and markets. ISO 27001
Why DigiSôter
- Experience from large industrial groups, adapted to an SME.
- A team led by Philippe Cornette, Belgian CISO of the Year 2025.
- More than 10 consultants, available according to your needs.
- ESET partner for endpoint and server protection.
Let’s discuss your situation
In 30 minutes, we look together at what matters for your business and where to start.
30 minutes, no commitment.