Qfor Cybersecurity Assessment Software: Prepare for Your CyFun® Process in a Structured Way
Preparing for a CyFun® or NIS2 process requires a methodical approach. It is important to understand the requirements, assess the current situation, document guidelines, collect evidence, and follow up on corrective actions. For many organizations, managing these tasks across scattered files quickly becomes complex.
The Qfor Cybersecurity Assessment Software helps organizations centralize their CyFun® self-assessment and better prepare for the next steps: preliminary investigation, audit, or certification.
Software specifically developed for CyFun® and NIS2
The software has a clear purpose: to help organizations prepare for the CyberFundamentals Framework and the requirements related to NIS2. It enables step-by-step progress through the “Basic,” “Important,” and “Essential” levels—within a clear and scalable structure.
The software is intended for IT and cybersecurity managers, internal coordinators, consultants, and organizations with multiple locations that want to strengthen their cybersecurity.
By centralizing assessments, supporting documents, and identified non-conformities, the software replaces fragmented files with a structured work environment. In this way, the software provides a consolidated overview of progress and facilitates the management of the measures to be implemented.
For which organizations?
The Qfor Cybersecurity Assessment software is intended for organizations that:
- want to assess their position relative to the CyberFundamentals Framework;
- are preparing for a CyFun® audit or certification;
- want to centralize their documents and supporting evidence;
- involve multiple stakeholders;
- want to compare different units, locations, or departments;
- avoid fragmented storage of supporting documents, which are difficult to manage.
It can also be useful for organizations that are not directly subject to NIS2 but wish to obtain an objective overview of their security level.
How does the self-assessment work?
Once the organizational structure has been created in the Qfor Cybersecurity Assessment software, the relevant parties can contribute directly within the tool. They enter their assessments, document the guidelines, indicate the degree of implementation, and attach the required supporting documents. This approach facilitates collaboration and reduces the risk of information loss.
Centralizing Supporting Evidence and Documents
Thorough CyFun® preparation is based on supporting evidence. With the Qfor Cybersecurity Assessment Software, documents can be uploaded, references added, or the location of supporting evidence specified. During an NIS2 compliance audit, the information can be more easily retrieved and verified by the Normec CertUp auditor or another accredited certification body.
This centralization is a significant advantage for organizations that must demonstrate not only the existence of policies but also their implementation.
The Qfor Cybersecurity Assessment Software combines the essential functions for structuring, maintaining, and improving your CyFun® approach:
- self-assessment according to CyFun® levels;
- tracking of guideline assessments and their implementation;
- Centralization of evidence;
- Management of multiple stakeholders;
- Comparison between business units or locations;
- Import and export of data relevant to the audit;
- Available in French, Dutch, and English.
Tailored to CyFun®
A company can start with a self-assessment at the “CyFun® Basic” level and, depending on its risk profile, requirements, and level of maturity, move on to the “Important” or “Essential” levels. The software supports this progression by providing a clear overview of gaps, assessments, and actions.
Why choose the Qfor Cybersecurity Assessment Software?
The tool is designed with an audit in mind. It is not general cybersecurity software, but a solution focused on preparing for CyFun® / NIS2. This specialization makes it a useful tool for organizations seeking greater clarity, efficiency, and compliance.
Using it also facilitates dialogue with the Normec CertUp auditor during a CyFun® audit or certification and saves you time.
Are you preparing for CyFun® or NIS2?
You might also be interested in these services
Frequently asked questions about Qfor Cybersecurity Assessment Software
-
No. The software helps you prepare for the self-assessment and gather supporting documentation, but it does not replace an official audit or certification.
-
Yes. The Qfor Cybersecurity Assessment Software is suitable for organizations that need to monitor multiple entities, locations, or departments and compare their progress.
-
Yes. It can help IT and cybersecurity consulting firms guide their clients through a CyFun® process.
-
Yes. If your organization already uses an Excel file for self-assessment, you can import the existing data to easily continue your follow-up in the tool.
When you are ready to complete the self-assessment phase, you can export the information in the format required by the CCB, which is tailored to the verification or certification phase.
The audit proceeds very smoothly when conducted with Normec CertUp, as the auditors are familiar with the software’s structure. However, the export can also be used to prepare for an assessment by another CAB (Conformity Assessment Body).