{"id":2859,"date":"2025-11-17T21:14:21","date_gmt":"2025-11-17T21:14:21","guid":{"rendered":"https:\/\/dadir.be\/cyfun-belgiums-answer-to-smarter-cybersecurity\/"},"modified":"2025-11-18T05:16:53","modified_gmt":"2025-11-18T05:16:53","slug":"cyfun-belgiums-answer-to-smarter-cybersecurity","status":"publish","type":"post","link":"https:\/\/dadir.be\/en\/cyfun-belgiums-answer-to-smarter-cybersecurity\/","title":{"rendered":"CyFun: Belgium\u2019s answer to smarter cybersecurity"},"content":{"rendered":"

In an era dominated by digital transformation, everything seems to be moving faster, smarter, and more connected. But here\u2019s the big question: what does that mean for security?<\/span>\u00a0<\/span><\/p>\n

You\u2019ve probably heard a lot about <\/span>cybersecurity<\/span><\/i>. Firewalls, phishing, ransomware, it\u2019s everywhere in the headlines. But there\u2019s a new player you may not know much about yet: CyFun. And if you\u2019re running a business in Belgium, it\u2019s something you\u2019ll definitely want to pay attention to.<\/span>\u00a0<\/span><\/p>\n

What is CyFun?<\/span><\/b>\u00a0<\/span><\/p>\n

CyFun, short for <\/span>CyberFundamentals Framework<\/span><\/i><\/a>, is Belgium\u2019s practical guide to staying safe in a digital-first world. Developed by the Centre for Cybersecurity Belgium (CCB), it helps organizations build stronger cyber defenses while staying compliant with the EU\u2019s NIS2 Directive, which came into force in Belgium on 18 October 2024.<\/span>\u00a0<\/span><\/p>\n

CyFun is the roadmap that shows you what to do, step by step, to protect your organization from digital threats.<\/span>\u00a0<\/span><\/p>\n

How does it work<\/span><\/b>\u00a0<\/span><\/p>\n

Cyfun starts with the CyFun Selection Tool. This is a risk assessment tool that results in a well-informed selection of the appropriate CyberFundamentals Assurance Level.<\/span>\u00a0<\/span><\/p>\n

. This assessment considers key factors such as your size, sector, risk exposure, and the potential impact of a cyber incident.<\/span>\u00a0<\/span><\/p>\n

Once the level is set (Basic, Important or Essential), CyFun provides a structured framework to guide your cybersecurity practices. With its upcoming update, it will align fully with <\/span>NIST Cybersecurity Framework V2.0<\/span><\/a>, organizing everything around six core functions:<\/span>\u00a0<\/span><\/p>\n

    \n
  1. Govern<\/span><\/b> \u2013 Define and monitor your cybersecurity strategy, risk appetite, and policies.<\/span>\u00a0<\/span><\/li>\n
  2. Identify<\/span><\/b> \u2013 Understand your risks, assets, and vulnerabilities.<\/span>\u00a0<\/span><\/li>\n
  3. Protect<\/span><\/b> \u2013 Put measures in place to prevent incidents.<\/span>\u00a0<\/span><\/li>\n
  4. Detect<\/span><\/b> \u2013 Build the ability to recognize and track threats.<\/span>\u00a0<\/span><\/li>\n
  5. Respond<\/span><\/b> \u2013 Establish clear incident response and mitigation procedures.<\/span>\u00a0<\/span><\/li>\n
  6. Recover<\/span><\/b> \u2013 Ensure business continuity and resilience after an incident.<\/span>\u00a0<\/span><\/li>\n<\/ol>\n

    These functions give organizations a step-by-step way to strengthen their digital defenses.<\/span>\u00a0<\/span><\/p>\n

    Levels that fit your organization<\/span><\/b>\u00a0<\/span><\/p>\n

    Based on the initial assessment, CyFun assigns organizations to one of three security maturity levels:<\/span>\u00a0<\/span><\/p>\n