Cybersecurity, NIS2, and CyFun®: Move Forward with a Clear and Verifiable Approach
Cybersecurity has long ceased to be a purely technical issue. It affects business continuity, your customers’ trust, data protection, and your company’s accountability. With the entry into force of NIS2 and the development of the CyberFundamentals framework, many companies today must determine their maturity level, structure their supporting documentation, and demonstrate the measures they have taken.
Normec CertUp guides organizations through this transition with a clear range of services: audits, preliminary assessments, compliance assessments, self-assessment tools, and recognized certifications. The goal is simple: we want to help you make progress step by step—with a clear, pragmatic approach tailored to your maturity level.
An approach tailored to your situation
Not all organizations have the same requirements. An SME seeking an initial objective overview of its cybersecurity does not start from the same point as a company subject to the NIS2 Directive, or an organization already undergoing an ISO 27001 certification process.
Normec CertUp helps you choose the right path:
- Conduct an initial pragmatic audit with Qfor CyberScan;
- prepare a CyFun® self-assessment using the Qfor CyberSecurity Assessment Software;
- organize a preliminary review prior to an official assessment;
- structure your information security through ISO 27001 certification
Our cybersecurity services
- Qfor CyberScan audit
- Qfor Cybersecurity Assessment software
- CyFun Preliminary Assessment
- CyFun® Compliance Assessment: Basic & Important
- ISO 27001 Certification
Which approach should you choose?
If you’re an SME and want an initial independent assessment, start with Qfor CyberScan.
If you need to prepare for a CyFun® or NIS2 process, the Qfor Cybersecurity Assessment Software can help you structure your self-assessment.
If you want to better understand the requirements before the official audit, the CyFun® preliminary assessment is a useful step.
If your organization falls under NIS2 and is seeking CyFun certification, a CyFun®/NIS2 compliance assessment is the most important step.
If your organization is seeking an international framework for information security management, ISO 27001 certification may be the most appropriate path.
Would you like to learn more about cybersecurity, NIS2, and CyFun®?
Frequently Asked Questions – Cybersecurity
-
It depends on your sector, your size, your role in the supply chain, and your activities. Organizations in critical or important sectors must assess their situation and, if necessary, implement the required measures.
-
A Qfor CyberScan audit is a voluntary cybersecurity audit process, particularly suited to small and medium-sized enterprises (SMEs). CyFun® is a reference framework for structuring and evaluating cybersecurity measures, particularly in the context of NIS2.
-
It depends on your level of readiness. If you want to organize your responses and supporting documentation first, software can be helpful. If you want an outside assessment of your situation, an audit or a preliminary review may be more appropriate.
-
No, not automatically. ISO 27001 is a solid foundation, but NIS2 has specific requirements that need to be analyzed.