NIS2 compliance for your SME or non-profit
Belgium's NIS2 law has been in force since 18 October 2024. Essential entities must meet the baseline measures by 18 April 2026. We guide you from scope check to implementation.
- Concrete scope check based on sector and size
- CyFUN-aligned gap analysis and implementation plan
- Pragmatic and phased, not one-size-fits-all
- Not legally required? Cascade risk via your clients still applies
Are you in NIS2 scope? Run the check
Three short questions, no email needed. At the end you get a verdict and the next steps.
1.Do you operate in a NIS2-listed sector? (water, postal, chemicals, food, medical devices, ICT, research, transport, energy, finance, health, public administration)
2.Does your organisation have 50 or more employees, OR more than 10 million euros in turnover or balance sheet?
3.Do you have at least one client that is itself in NIS2 scope and includes you in their supplier review?
Three phases, one clear goal: demonstrably compliant
We work through your situation pragmatically and do not stop at the report. You get a plan you can execute yourself or with us.
1. Scope check
Determine whether you fall under NIS2 based on sector and size, plus the indirect cascade risk through your clients.
2. Gap analysis
CyFUN-based baseline against the Basic or Important controls, depending on your scope level.
3. Implementation plan
Concrete plan with priorities, timeline and cost. CCB registration and organisational measures included.
No one-size-fits-all, a plan tailored to you
NIS2 differs strongly by sector and risk profile. We start from your situation and build the plan that fits your SME or non-profit, not a template trajectory.
Book a first call to see what is relevant in your case. We openly discuss which measures you can absorb yourself and where external guidance adds value.
Book a callRequest a NIS2 assessment
We focus directly on the compliance side of your situation.