What does a CyFun audit cost?

The framework, workbook and portal are free at every tier. The CAB audit fee is roughly €5,000-€25,000 for a first-time Important-tier audit. Basic has none, and Essential has none yet. On top of that, expect weeks of internal preparation and, optionally, €15,000-€60,000 of outside consultancy for Important. These are industry-reported ranges, not a published rate card.

Why is there no fixed CAB price list?

Conformity Assessment Bodies are accredited by BELAC for CyFun and authorised by the CCB, but they set their own rates and quote per engagement. No Belgian CAB publishes a flat rate card. Fees scale with company size, scope complexity and how clean the workbook hand-off is.

Does Basic need a CAB audit?

No. Basic (34 controls) is self-assessment only; there is no mandatory CAB audit. Working through it internally costs only your time: usually 4-8 weeks with reasonable existing hygiene, or 12-16 weeks from a near-zero baseline.

What about Essential-tier audit cost?

No CAB is authorised to certify Essential tier yet, per the CCB list of 7 September 2026. There is no audit fee to estimate for Essential today. Expect 24-36 weeks of internal preparation regardless of when a CAB becomes available.

Is ECP’s own platform price included in this estimate?

No. This tool estimates audit and preparation costs only, never a platform price. The MSP-assisted path shows an industry-reported range for platform-assisted work, with a link to the source article.

← Free tools

FREE TOOL

What does a CyFun CAB audit actually cost?

A CyFun CAB audit costs roughly €5K-€25K at Important tier, plus weeks of internal preparation and, optionally, €15K-€60K of outside consultancy. Basic has no mandatory audit: self-assessment only, free framework, your own time. No CAB is authorised for Essential yet. Pick your tier and hygiene below to see the Year-1 range and every cost behind it.

Which CyFun tier are you estimating for?

BasicImportantEssential

Existing security hygiene

Reasonable (some controls already in place)Near-zero (starting from scratch)

How will the Important-tier audit be prepared?

External consultancyMSP-assisted (tooling platform + MSP)

CCB framework, workbook and portal: €0 at every tier.
Preparation effort: 16-24 weeks of internal time, not euros.
CAB audit fees: €5,000–€25,000 (first-time Important-tier audit).

Estimated Year-1 total

€10,000–€35,000

This is an industry-reported, MSP-platform-assisted range. It does not include a platform price. See the source article for the authoritative figure.

Read the full cost breakdown →

These are industry-reported ranges based on direct conversations with Belgian SMEs, MSPs and prospective CAB engagements, not a published rate card. Collect three CAB or consultancy proposals before committing.

By Tom Janssens · Founder, Easy Cyber Protection · Last reviewed 3 November 2026 · How we write this

What are the four cost buckets?

A CyFun audit-readiness budget has four parts, and three of them cost little or nothing. First, the CCB framework, Excel workbook, scoring rubric and Safeonweb @work portal are free at every tier: Basic, Important and Essential.

Second, preparation is internal time, not euros. Basic takes 4-8 weeks with reasonable existing hygiene and 12-16 weeks from a near-zero baseline. Important takes 16-24 weeks and Essential 24-36 weeks.

Third, the CAB audit fee: roughly €5,000-€25,000 for a first-time Important-tier audit. Basic has no mandatory CAB audit. No CAB is authorised to certify Essential yet (CCB list of 7 September 2026), so there is no Essential fee to report.

Fourth, optional outside consultancy for a first-time Important audit: €15,000-€20,000 with reasonable hygiene, €40,000-€60,000 from near-zero documentation. Many organisations skip this and use a tooling platform plus internal time.

Read the full cost breakdown →

See also the CyFun readiness quiz and the What is CyberFundamentals (CyFun) page.

What does an MSP-assisted Important audit look like?

Take a company at Important tier with reasonable security hygiene that chooses the MSP-assisted path over a standalone consultancy engagement. The CAB audit fee still applies (roughly €5,000-€25,000). But the gap analysis, policy drafting and evidence collection that would otherwise cost €15,000-€20,000 in consultancy fees are replaced by a compliance platform that an MSP runs on the client’s behalf.

That path lands at roughly €10,000-€35,000 for Year 1, over 3-4 months. The audit-plus-consultancy path costs €20,000-€85,000 and takes 3-6 months. These are industry-reported, platform-assisted figures, not ECP’s own published price. Try the estimator and read the full breakdown for the authoritative figure.

See also the NIS2 fine calculator for the full cost-and-consequence picture.

Try the tool above ↑

Frequently asked questions

What does a CyFun audit cost?: The framework, workbook and portal are free at every tier. The CAB audit fee is roughly €5,000-€25,000 for a first-time Important-tier audit. Basic has none, and Essential has none yet. On top of that, expect weeks of internal preparation and, optionally, €15,000-€60,000 of outside consultancy for Important. These are industry-reported ranges, not a published rate card.
Why is there no fixed CAB price list?: Conformity Assessment Bodies are accredited by BELAC for CyFun and authorised by the CCB, but they set their own rates and quote per engagement. No Belgian CAB publishes a flat rate card. Fees scale with company size, scope complexity and how clean the workbook hand-off is.
Does Basic need a CAB audit?: No. Basic (34 controls) is self-assessment only; there is no mandatory CAB audit. Working through it internally costs only your time: usually 4-8 weeks with reasonable existing hygiene, or 12-16 weeks from a near-zero baseline.
What about Essential-tier audit cost?: No CAB is authorised to certify Essential tier yet, per the CCB list of 7 September 2026. There is no audit fee to estimate for Essential today. Expect 24-36 weeks of internal preparation regardless of when a CAB becomes available.
Is ECP’s own platform price included in this estimate?: No. This tool estimates audit and preparation costs only, never a platform price. The MSP-assisted path shows an industry-reported range for platform-assisted work, with a link to the source article.

Related free tools

Full CyFun audit cost breakdown · For IT partners and MSPs

Use this with your clients