ANPI supports you in verifying your cybersecurity maturity according to the Belgian framework CyFun®, in support of the European NIS2 directive.
Beyond fire and theft prevention, we also dedicate our expertise to cybersecurity, a major stake for all organizations.
Why a cybersecurity approach?
- The European Union has updated its legislative framework for cybersecurity with the NIS2 Directive (Directive (EU) 2022/2555), made mandatory by the Belgian law of April 26, 2024.
- In Belgium, the Centre for Cybersecurity Belgium (CCB) promotes the CyberFundamentals Framework (CyFun®) as the national reference framework for structuring cyber measures and aligning companies with regulatory expectations.
- The term “CyFun®” (the abbreviation for CyberFundamentals Framework) is a registered trademark of the CCB.
- Its objective is to offer concrete, modular and adapted measures for all companies, regardless of their size, in order to strengthen their cyber resilience.
What ANPI offers in the context of CyFun® verification
ANPI carries out the verification of your company according to the Basic and Important levels of the CyFun® framework, by applying a structured and impartial process, compliant with the best practices of the NBN EN ISO/IEC 17029 standard.
Transparency and impartiality
ANPI makes the following public information available:
- Our commitment to impartiality, which guarantees that we carry out our verification activities objectively, by managing conflicts of interest.
- Information on our verification process.
- The list of our verification activities, with the corresponding applicable programs.
- Our procedure for handling complaints and appeals.
- The possibility, upon request, of obtaining the status of a verification statement already issued.
To receive any of these documents or to obtain more information, please contact: certification@anpi.be.
Stages of the verification mission
- Pre-engagement: Feasibility study, request for supporting documents, completeness checklist
- Engagement & contractualisation: Signature of the purchase order, review of conditions
- Planning: Definition of the verification plan, notification of roles, verification of conflicts of interest
- Execution: Collection of evidence, documentary analysis, on-site or remote verification, review of the plan if necessary
- Report & review: Drafting of the report, review by an external or independent Reviewer
- Decision & statement: Finalised decision, issuance of the verification statement (if compliant)
- Post-statement follow-up: Management of new facts and revision if necessary
Criteria & terms
- Basic level: each key measure ≥ 2.5/5 and overall score ≥ 2.5/5
- Important level: each key measure ≥ 3/5 and overall score ≥ 3/5
- Full verification (every 3 years) or limited verification (within 30 months)
- Possibility of excluding a measure (if duly justified)
- Guaranteed impartiality: the roles of Verifier, Reviewer, and Decision Maker are strictly separate and without conflicts of interest
What you receive at the end of the mission
- The complete verification report, compliant with the CCB model.
- The Verification Statement (final opinion) indicating conformity (at the Basic or Important level), or the absence of a statement if non-compliant..
Consult our other articles regarding the NIS2 directive.
Choose a qualified verification body
ANPI has already submitted its accreditation application to BELAC for ISO 17029 and the CyberFundamentals Framework to carry out verifications.
Stay tuned! Follow our news for updates as soon as the accreditation is made official.
Do you wish to receive complementary information: certification@anpi.be
Do you wish to receive a price offer: sales@anpi.be
