Beyond fire and intrusion prevention, we also put our expertise at the service of cybersecurity, a major challenge for all organisations.
Why embark on a cybersecurity journey ?
- The European Union has updated its cybersecurity legislative framework through the NIS2 Directive (Directive (EU) 2022/2555), made mandatory by the Belgian law of 26 April 2024.
- In Belgium, the Centre for Cybersecurity Belgium (CCB) promotes the CyberFundamentals Framework (CyFun®) as the national reference framework to structure cybersecurity measures and align organisations with regulatory expectations.
- The term CyFun® is a registered trademark of the CCB.
- Its objective is to provide practical, modular and adapted measures to all organisations, regardless of their size, in order to strengthen their cyber resilience.
What ANPI offers for CyFun® verification
ANPI performs the verification of your organisation's cybersecurity maturity level according to the Basic and Important assurance levels of the CyFun® framework, applying a structured and impartial process in accordance with the principles of ISO/IEC 17029.
Transparency and impartiality
Pour recevoir l’un de ces documents ou obtenir plus d’informations, veuillez contacter : certification@anpi.be.
ANPI makes the following available to the public:
- Our commitment to impartiality, ensuring that verification activities are carried out objectively and without conflicts of interest.
- Information about our verification process.
- A list of our verification activities, together with the applicable verification schemes.
- Our complaints and appeals procedure.
- The possibility, upon request, to obtain the status of a verification statement already issued.
To receive any of these documents or obtain further information, please contact: certification@anpi.be.
The verification process
To undergo a verification according to the Belgian CyFun® framework, your organisation generally follows the steps below:
- Assess your risks
Identify the CyFun® assurance level that best fits your organisation: Basic, Important or Essential. The CyFun® selection tool will guide you in this process. - Prepare your organisation for CyFun® verification
Complete your self-assessment using the CyFun® Self-Assessment Tool. This tool helps you identify existing measures, document results and define the actions required to achieve compliance. Until 18 April 2027, organisations may choose between the 2023 and 2025 versions of the tool. - Verify your CyFun® self-assessment
As a Conformity Assessment Body (CAB), ANPI carries out an independent verification to confirm that your organisation meets the requirements of its selected CyFun® assurance level. - Receive an official verification report
At the end of the assignment, you receive a complete verification report compliant with the CCB model. When the verification result is positive, ANPI issues a CyFun® Verification Statement. - Obtain your CyFun® label
Following the verification carried out by ANPI and the issuance of the Verification Statement, your organisation may apply for the CyFun® Label through the Safeonweb@work portal, in accordance with the procedure defined by the CCB.
Assignment Steps
- Pre-engagement: eligibility review, request for supporting evidence, completeness checklist.
- Engagement & Contracting: signature of the agreement and purchase order, review of applicable conditions.
- Planning: definition of the verification plan, role assignment, verification of conflicts of interest.
- Execution: collection of evidence, document review, on-site and remote verification activities, revision of the plan if required.
- Reporting & Review: preparation of the report and review by an external or independent reviewer.
- Decision & Opinion: final decision and issuance of the verification opinion (if compliant).
- Post-opinion Follow-up: management of new information and revision where necessary.
Criteria & Modalities
- Basic Level: each key measure ≥ 2.5/5 and overall score ≥ 2.5/5.
- Important Level: each key measure ≥ 3/5 and overall score ≥ 3/5.
- Full Verification (every 3 years) or Limited Verification (within 30 months).
- Possibility to exclude a measure (if duly justified).
- Impartiality Guaranteed: the roles of verifier, reviewer and decision-maker are strictly separated and free from conflicts of interest.
What you receive at the end of the assignment
- Le rapport de vérification complet, conforme au modèle du CCB.
- Le Verification Statement (avis final) indiquant la conformité (au niveau Basic ou Important), ou l’absence d’avis si non conforme.
- The complete Verification Report, compliant with the CCB template.
- The Verification Statement (final opinion) indicating compliance (at Basic or Important level) or, where applicable, the absence of a verification opinion in case of non-compliance.
Consult our other articles related to the NIS2 Directive.
Choose a qualified verification body
ANPI is accredited by BELAC according to ISO/IEC 17029:2019 and the CyberFundamentals Framework (CyFun® CAS: 2025-11-26) to perform verification activities.
ANPI holds BELAC accreditation and CCB authorisation to perform CyFun® verifications. This official recognition enables ANPI to conduct verification activities in accordance with the CyFun® CAS (CyberFundamentals Framework Conformity Assessment Scheme) and ISO/IEC 17029.
For additional information: certification@anpi.be
To request a quotation: sales@anpi.be
For more information, please refer to the official CyFun® website in Belgium.
