A milestone for cyber security and risk management in Ireland: the launch of the CyberFundamentals Framework

CyFun is a voluntary cybersecurity certification adopted by Ireland’s National Cyber Security Centre (NCSC) to help organisations organise and evidence their security controls. 

Developed in Belgium and now co-owned by Ireland, the CyberFundamentals Framework, or CyFun, provides a clear, step-by-step approach to cybersecurity. It helps organisations protect their data, reduce the risk of common cyber-attacks, and build long-term resilience. The framework is scalable and accessible, making it suitable for entities of all sizes.

With the imminent transposition of the EU’s NIS2 Directive in Ireland, the Cyfun Framework provides a structured approach to approach for organisations to meet their NIS2 requirements.

CyFun is built around three maturity levels: Basic, Important, and Essential. These levels allow organisations to assess their cybersecurity posture and implement controls appropriate to their size, risk exposure, and sector.

CyFun aligns with internationally recognised standards, including:

• NIST Cybersecurity Framework (CSF)
• ISO 27001 and ISO 27002
• IEC 62443
• CIS Critical Security Controls (ETSI TR 103 305-1)

The CyberFundamentals Framework represents a fundamental step on the journey towards cyber resilience for Irish organisations. At Forvis Mazars, we welcome this development and look forward to supporting our clients as they engage with the framework and strengthen their cybersecurity posture.