FAQ

NIS2 is an EU directive strengthening cybersecurity requirements for certain organisations. In Belgium, its transposition includes risk-management measures, incident reporting and management responsibilities. The obligations depend on the organisation’s circumstances.

CyberFundamentals, or CyFun®, is a cybersecurity framework developed by the Centre for Cybersecurity Belgium. It organises measures into assurance levels. What a Work offers Basic and Important verification within its accreditation scope.

Under the CyFun® scheme, Basic and Important are subject to verification, while Essential is subject to certification. What a Work offers Basic and Important verification. A verification statement issued following a favourable decision must not be presented as an Essential certificate.

Accreditation recognises a body’s competence for specific activities defined in its accreditation scope. What a Work SRL is accredited by BELAC under number 770-VV against ISO/IEC 17029. Accreditation concerns the body and covered activities; it is not certification of the client.

You receive a report setting out the work and conclusions. Following independent review and a decision, a verification statement is issued according to the outcome. The claim is what you submit; the verification statement is the document issued by the body.

The engagement starts with a review of the scope and feasibility. After agreement, we plan the audit, examine the self-assessment and evidence, and carry out the planned activities. An independent review and a decision conclude the process.

Prepare your scope, claim, CyFun® self-assessment and supporting evidence: policies, procedures and records demonstrating that measures have been implemented. The precise list depends on the level and engagement. Your team or service providers prepare these items.

Timing and fees depend on the scope, CyFun® level, number of sites and availability of evidence. We provide a quote after reviewing your request. A standard price or timeframe cannot replace that review.

It helps demonstrate the measures assessed, but does not cover every NIS2 obligation by itself. Incident reporting, governance and other applicable duties still need to be met. The assurance level must match your circumstances; Basic verification does not replace Essential certification where required.

What a Work offers audits and reports in French, English and Dutch. Please specify your preferred language in your request. The website is also available in German.

Use the dedicated footer link and provide the statement reference and the organisation’s name. We will review your request to confirm its status. The page is not a public register or an automated confirmation of validity.