We’re excited to share that the new version of the CyberFundamentals Framework, CyFun® 2025, is now officially available. This updated version helps organisations improve their cybersecurity in today’s fast-changing digital world.
What’s new?
CyFun® 2025 was created to match international standards like the NIST Cybersecurity Framework 2.0 and national and European legislations and regulations, such as the European NIS2 Directive. It includes the latest knowledge and best practices in cybersecurity.
Earlier this year, over 80 experts and organisations helped review the first draft. Their feedback made the framework easier to understand and more practical to use.
Key improvements
- More focus on protecting the supply chain (e.g. your suppliers and partners)
- More focus on OT
- Clearer rules and controls to make checking and auditing easier
- Governance measures have been added starting from the Important Assurance Level, helping organisations improve oversight and align cybersecurity with business goals
- Extra guidance to help with using and understanding the framework
Transition period
To make the switch easier, both CyFun® 2023 and CyFun® 2025 will be both available for a while. After that, only the new version will be accepted for self-assessments and third party conformity assessment.
Everything in one place
All updated tools and documents are now available on the new developed CyberFundamentals Framework website, including:
- Self-assessment tools for all three assurance levels
- Easy-to-follow guides to help you apply the framework
- Extra documents and resources for support