Belgium CyberFundamentals · CCB Framework · Evidence & Implementation Kit
Reach your CyberFundamentals assurance level, without turning the framework into controls yourself.
Every part of the Belgium CyberFundamentals Framework handed to you as an adopt-ready control, across the NIST CSF functions and the Small, Basic, Important and Essential assurance levels, with the evidence a verifier examines.
Assurance-ready in a weekend, not a quarter.
Here is the honest situation. Belgian organizations, and those preparing for NIS2, use the Centre for Cybersecurity Belgium's CyberFundamentals Framework to demonstrate cyber maturity at one of four assurance levels: Small, Basic, Important and Essential, the last aligned with NIS2 expectations. It is built on NIST CSF, ISO 27001, CIS Controls and IEC 62443, across the identify, protect, detect, respond and recover functions. Reaching a level, and being verified by the CCB, means implementing and evidencing the measures, and a control short of the level you claim is exactly where the assurance level is not met.
This Kit removes that build. It is every part of the CyberFundamentals Framework written as an adopt-ready control you personalize in a weekend, with the evidence a verifier examines.
What you get, the moment you buy
35
The framework as adopt-ready controls. Every part of the CyberFundamentals Framework across the five NIST CSF functions, with the assurance-level mapping noted, written so you personalize and apply it toward your target level.
35
Evidence-they-examine checklists. For each control, exactly what a verifier examines, plus where the assurance level is not met, so you close the gap first.
1
CyberFundamentals Control Matrix, pre-built. Every control in a working spreadsheet, ready to record target assurance level, status and evidence location.
1
Gap & Readiness Assessment. Score each control and the workbook returns your progress toward the target assurance level as a single percentage, and exactly what to fix next.
Grounded in the Belgium CyberFundamentals Framework, built on NIST CSF, ISO 27001, CIS Controls and IEC 62443, with the Small, Basic, Important and Essential assurance levels and the NIS2 alignment called out. Editable Word and Excel files.
Essential is your NIS2 readiness, done
The Essential assurance level is aligned with NIS2 expectations, so reaching it does double duty: CyberFundamentals verification and a strong NIS2 posture. This Kit builds the controls and notes the level each meets, so the work toward Essential is also the work toward NIS2 compliance.
What one control looks like
This is the assurance levels and governance, where a CyberFundamentals program begins. All 35 are built to this depth.
CF-1 Select and justify the target assurance level ASSURANCE LEVELS
Implement this control
[Organization] shall determine and formally document its target CyberFundamentals assurance level (Small, Basic, Important or Essential), justifying the selection against its size, sector, threat exposure and any legal obligations, and shall record the decision in a governance artefact approved by senior management and reviewed at least annually.
Assurance-level note.
Small = key measures for very small organizations; Basic protects against common attacks; Important gives higher assurance against skilled attackers; Essential protects against advanced targeted attacks and aligns with NIS2 expectations.
Evidence a verifier examines
- Signed assurance level selection decision record
- Risk-based justification memorandum referencing sector and threat exposure
- Senior management approval minutes
- Annual review log of the selected level
Common finding they raise: Many organizations adopt a level informally without documenting why it fits their risk profile, leaving the choice indefensible during CCB verification.
Why this is not another template pack
- The evidence is the point. A control you cannot evidence does not meet the level. This tells you exactly what a verifier examines and where the level is not met, for every control.
- Assurance levels and NIS2 built in. The four assurance levels and the Essential-to-NIS2 alignment are written into the controls, so you target the right level and get NIS2 readiness with it.
- Built on a mapped compliance corpus, not one person's opinion, from a graph of thousands of controls across standards.
- It compounds. CyberFundamentals is built on NIST CSF, ISO 27001, CIS and IEC 62443, so this work maps onto those standards too.
Who buys this
Belgian organizations and those in scope of NIS2, the security and compliance leads who own cyber maturity, and consultants preparing for CCB verification. Whether it is a first assessment or an Essential-level target, you save weeks and walk in with the controls and evidence ready.
By the end of the weekend you will have
✓ An adopt-ready control for all 35 items
✓ A completed CyberFundamentals control matrix
✓ The evidence a verifier examines
✓ Your target assurance level and NIS2 posture defined
✓ A progress percentage and a fix list
✓ The gaps to your target level closed
Common questions
Is it really editable? Yes. Word and Excel files you own and adapt. No portal, no subscription.
What are the assurance levels? Small, Basic, Important and Essential. Each addresses a higher threat class, with Essential aligned to NIS2. The Kit notes the level each control meets.
Does it help with NIS2? Yes. The Essential level is aligned with NIS2 expectations, so reaching it supports NIS2 readiness.
What is it based on? NIST CSF, ISO 27001, CIS Controls and IEC 62443, across the five CSF functions. The Kit reflects that structure.
What if it is not for me? A 30-day money-back guarantee.
Do not claim an assurance level you cannot evidence.
Every CyberFundamentals control is fast to adopt with the Kit. It is instant, and it is guaranteed.
Add it to your cart and reach your assurance level this weekend.
Instant digital download · 30-day money-back guarantee · The Art of Service Pty Ltd, GPO Box 2673, Brisbane QLD 4001 · support@theartofservice.com
