IT Partner? See how to deliver NIS2 audit-readiness

View partner offer →
← Free tools

FREE TOOL

How far is your company from the basic cyber safety level?

This free quiz checks how close your company is to CyFun Basic, the entry level of Belgium’s CyberFundamentals framework, in about five minutes. You get a score and the list of what to fix first, no email needed to see it.

  1. 1. Do you know which cyber laws apply to your company and follow them, and is there a written plan for how you handle cyber risks?
  2. 2. Are your security rules written down, approved by management and known to your staff?
  3. 3. Is there an up-to-date list of all your computers, network devices and cloud environments?
  4. 4. Is there an up-to-date list of the software and online services you use?
  5. 5. Do you know what data you keep, and which systems and data matter most to the business?
  6. 6. Are security updates installed on computers and important systems soon after they come out?
  7. 7. Have you looked at what could go wrong (threats, weak spots) and how badly it would hurt the business?
  8. 8. Do people need a second step besides their password (a code or app) to log in from outside, and must everyone log in with their own account to reach your most important systems?
  9. 9. Does everyone have their own account, with access only to what their job needs, and are accounts closed when people leave?
  10. 10. Do people work day to day without administrator rights on their computer?
  11. 11. Is your Wi-Fi, including guest Wi-Fi, set up securely, and is physical access to your offices and server room controlled?
  12. 12. Do your staff get regular training on spotting phishing and working safely?
  13. 13. Are backups of your important data made and kept on a different system than the original?
  14. 14. Are firewalls in place and maintained, on the network and on computers, and are important systems kept apart from the rest of the network?
  15. 15. Is up-to-date protection against viruses and malware running on every computer, are web and email filtered for dangerous content, and do you get a warning when someone does something risky on a computer?
  16. 16. Do your systems and security tools keep a record of who did what, and is that record backed up and looked at regularly?
  17. 17. If hackers get in, is there a plan that says who does what, how staff are told, and how you learn from it afterwards?
  18. 18. Is there a plan to get the business running again after a disaster or cyber incident?
  19. 19. Are old computers, phones and disks wiped or destroyed safely before they leave the company?

0 of 19 answered

Answer the 19 questions left to see your score.
By · Founder, Easy Cyber Protection · · How we write this

What is CyFun Basic?

CyberFundamentals (CyFun) is the Belgian framework for cyber security, from the Centre for Cybersecurity Belgium [1]. It has levels. Basic is the first one: 34 basic measures, like backups, updates, two-step login and an incident plan.

Which level your company needs follows from the CCB risk assessment. A small company can land on Basic; many companies under NIS2 need Important or Essential. Each higher level builds on Basic, so Basic is a good place to start.

The levels and what each one asks for are covered on the CyberFundamentals page and the levels page.

How does the quiz work?

Each question stands for one or more of the 34 Basic measures. Yes counts 2 points, partly 1, no or don’t know 0. The score is your share of the maximum. Under 40% means start with the basics, 40 to 79% means you are on the way, 80% or more means you are close. The quiz only knows your answers, not your proof. That makes it a self-check, not an assessment or a certificate.

Not sure NIS2 applies to you?

The NIS2 scope check asks a few questions about your sector and size, and tells you if you are essential, important or out of scope, and which CyFun level fits.

Do the scope check →

Ready to go deeper? The free CyFun Basic Evidence Checklist lists all 34 measures, with the evidence an auditor asks to see.

Frequently asked questions

How many controls does CyFun Basic have?
CyFun 2025 Basic has 34 controls. The Important level has 133 and the Essential level 218, each counting the levels below it.
Is this quiz an official CyFun assessment?
No. It is a quick self-check on your own answers. A formal CyFun conformity assessment is done by an accredited assessment body, which asks for proof.
What score do I need?
There is no pass mark in the quiz. A real assessment looks at each measure and the proof behind it. Use the score to see how much work is left, and the list to see where to start.
Do you store my answers?
The quiz runs in your browser; your answers are not sent to a server unless you ask for a PDF copy, which asks for your email just for that. The share link encodes your answers so re-opening it reproduces the same result.

Related free tools

What is CyberFundamentals (CyFun) · NIS2 field guide for MSPs

Use this with your clients

Sources

  1. CCB, CyberFundamentals framework