CyberFundamentals (CyFun®) Framework

Live online
04 November 2026
04 November 2026

Overview

CyberFundamentals (CyFun®) Framework

     Location: Virtual classroom (Live online)

     Format: Virtual classroom training

     Duration: 1 day, from 9:00 to 17:00

     Language: English

     Certification: Certificate of attendance  + An optional PECB package with self-study materials for PECB NIS 2 Directive Foundation, PECB NIST Cybersecurity Framework Foundation, PECB ISO/IEC 27001 Foundation, or PECB Cybersecurity Foundation.


Master the Practical Implementation of NIS2 with CyFun®

This training will enable you to understand and apply the CyberFundamentals Framework (CyFun®), translating NIS2 obligations into concrete cybersecurity controls, maturity objectives, evidence requirements, and conformity assessment activities.

You will learn how to use CyFun® to support organizations in structuring their cybersecurity measures, assessing their level of maturity, demonstrating compliance, and developing a practical implementation roadmap.

What you’ll learn:

  • Understand the structure of the CyberFundamentals Framework, including its functions, categories, subcategories, controls, requirements, and guidance
  • Determine the appropriate CyFun® assurance level: Basic, Important, or Essential
  • Translate CyFun® controls into concrete technical and organizational security measures
  • Use the CyFun® tools for framework selection, self-assessment, maturity scoring, mappings, and key measures
  • Identify and prepare the documentation and evidence required to demonstrate the implementation of controls
  • Understand the differences between self-assessment, external verification, and certification
  • Understand the role of Conformity Assessment Bodies and the relationship between CyFun® and ISO/IEC 27001
  • Develop a prioritized and practical CyFun® implementation roadmap
  • A practical and interactive one-day course featuring explanations, exercises, and an implementation workshop. Participants will translate organizational scope and risks into controls, evidence, priorities, and a concrete roadmap.

A basic understanding of NIS2 is recommended for this training.

What you will gain from this course:

  • The ability to apply the CyberFundamentals Framework within the context of NIS2
  • The skills to conduct a CyFun® self-assessment and interpret maturity results
  • A practical approach to selecting controls, collecting evidence, and preparing for conformity assessments
  • The ability to identify cybersecurity priorities and build a structured implementation roadmap
  • A better understanding of the Belgian NIS2 context and the broader positioning of CyFun® across Europe
  • A certificate of attendance confirming your participation in the training on the practical application of CyFun® and the translation of NIS2 obligations into actionable cybersecurity measures
  • An optional PECB package with self-study materials for PECB NIS 2 Directive Foundation, PECB NIST Cybersecurity Framework Foundation, PECB ISO/IEC 27001 Foundation, or PECB Cybersecurity Foundation, including access to the corresponding PECB exam and one free exam retake.

The CyFun® Framework is a framework owned by the Centre for Cybersecurity Belgium (CCB), operating under the authority of the Prime Minister of Belgium.

The abbreviation “CyFun®” stands for “Cyberfundamentals Framework” and is a registered trademark owned by the CCB.

The CyFun® Framework and CyFun® Conformity Assessment Scheme (CAS) are available on www.cyfun.eu, which is their only authentic source.

The services offered by NIS Institute may contribute to third party assessments, but they do not replace nor fulfil any accredited third-party assessment as described by the CyFun® Framework. Therefore, NIS Institute can never claim that its services fully meet the requirements of the CyFun® Framework and the services cannot be considered for use in conformity assessments resulting in obtaining a presumption of conformity with the NIS2 Directive and its Belgian transposition.

If there is any discrepancy between the products and services offered by NIS Institute and the documents on the website, only the latest version of the documents on the website is deemed authentic.