Defensive security for small and mid-sized companies in Belgium: find out where you stand against the CCB's CyberFundamentals framework, close the gaps that matter, and keep them closed.
Not sure you are in scope? Answer seven questionsNIS2 is the European directive on the cybersecurity of essential and important entities. In Belgium, the Centre for Cybersecurity Belgium (CCB) is the national authority for it.
It also reaches companies that are not in scope themselves: entities under NIS2 have to manage the risks of their suppliers, so a supplier can be asked to show its own security level.
CyberFundamentals (CyFun) is the CCB's framework. It turns security requirements into concrete controls, grouped into assurance levels, and comes with a self-assessment.
Who is in scope, which level applies and the official deadlines are published by the CCB. Check them at the source: ccb.belgium.be (opens in a new tab)
Four steps. You can stop after any of them.
We go through the scope criteria the CCB publishes with you, then assess the company against the CyberFundamentals level you are aiming for, using the CCB's own self-assessment as the base. Whether you are in scope is your call, with your legal adviser where needed.
The gaps against the target level become a 90-day action plan, in priority order.
Review the website or application, harden the server or cloud it runs on (firewall, access, tested backups, secrets, updates). Every finding comes with a proposed fix.
A monthly scan of dependencies and secrets, alerts, and a quarterly NIS2 check-in.
Not sure where to start? The 360° SME Check includes the NIS2 / CyberFundamentals assessment.
SMEs under NIS2, or suppliers of NIS2 entities
Sites with customer accounts, payments, back-office
SMEs with a server, VPS or cloud
After a review or hardening
All prices are in EUR and exclude VAT (21 % in Belgium).
An anonymised, read-only security and integrity review of a Belgian e-commerce back office: what was reviewed, how findings were backed by evidence, and how the fixes were scoped.
Read the case studyA 30-minute call to see whether NIS2 concerns you and which offer, if any, fits.
Book a 30-min call