Don’t do SECURITY. Do business SECURELY.

CyFun 2025: Belgium’s CyberFundamentals framework updated

The CCB has published CyFun 2025, with more emphasis on supply chain and operational technology security.

The Centre for Cybersecurity Belgium has published CyFun 2025, the latest version of its CyberFundamentals framework, which Belgian NIS2 entities can use to demonstrate compliance.

What’s new?

  • Greater emphasis on protecting the supply chain, including suppliers and partners.
  • More attention to operational technology (OT).
  • Clearer rules and controls to make assessment and auditing easier.
  • Governance measures incorporated at the higher assurance levels.

CyFun continues to map to international frameworks, including ISO/IEC 27001 and the NIST CSF. Organisations with Belgian operations or clients should plan their transition to the 2025 version.

Source: CyFun 2025 is here (Centre for Cybersecurity Belgium)

Need help understanding what this change means for your organisation? Get in touch for a pragmatic, no-obligation conversation.

More insights