What a Work

CYBERFUNDAMENTALS · BASIC & IMPORTANT

Verification
CyFun®.

Have your cybersecurity maturity independently verified against CyberFundamentals. What a Work carries out CyFun® Basic and Important audits as part of your NIS2 compliance journey or a voluntary assessment.

Audits and reports in French, English and Dutch.

BELAC 770-VV · ISO/IEC 17029Accredited verification bodyView our scope

YOUR NEEDS

Make your cybersecurity efforts tangible.

Independent verification for organisations seeking an assessment of their cybersecurity measures.

01

Your NIS2 journey

Have your measures assessed at the selected CyFun® level. The applicable level depends on your circumstances and risk assessment.

02

Your customers’ expectations

Provide an independent verification outcome to customers and partners requesting evidence about your cybersecurity.

03

A voluntary assessment

Have your maturity level verified even if your organisation does not fall directly within the scope of NIS2.

THE PROCESS

From first conversation to outcome.

  1. 01

    Your needs

    We review your scope, intended level and the feasibility of the engagement.

  2. 02

    Preparation

    We agree on the audit plan and the evidence to be provided.

  3. 03

    The audit

    We examine your documents and evidence of implemented measures.

  4. 04

    The outcome

    An independent review precedes the decision and communication of the conclusions.

Verification process

FAQ

Your questions. Clear answers.

NIS2, certification, verification: find useful explanations in our FAQ.

Read the full FAQ
What is NIS2?

NIS2 is an EU directive strengthening cybersecurity requirements for certain organisations. In Belgium, its transposition includes risk-management measures, incident reporting and management responsibilities. The obligations depend on the organisation’s circumstances.

Directive (EU) 2022/2555 — NIS2 CCB — NIS2
CyFun® certification or verification: what is the difference?

Under the CyFun® scheme, Basic and Important are subject to verification, while Essential is subject to certification. What a Work offers Basic and Important verification. A verification statement issued following a favourable decision must not be presented as an Essential certificate.

CyberFundamentals — CyFun® CyFun® — Authorised conformity assessment bodies
Does CyFun® verification mean full NIS2 compliance?

It helps demonstrate the measures assessed, but does not cover every NIS2 obligation by itself. Incident reporting, governance and other applicable duties still need to be met. The assurance level must match your circumstances; Basic verification does not replace Essential certification where required.

Directive (EU) 2022/2555 — NIS2 CCB — NIS2

WHAT A WORK

Let’s discuss your CyFun® verification.

Tell us your intended level, scope and preferred language. We will review your request.

Request a quote