My customer asks for a level other than Basic.

Small is included at the same price. For Important, Essential or several sites, the NIS2 gap assessment is the right service.

Does my IT partner need to take part?

Ideally yes: an hour of their time saves you questions later. I do not take over their work; you choose who carries out the measures.

How does this differ from the NIS2 gap assessment?

Here I stay at the Basic level, one site and a smaller organisation. The work is smaller, and so is the fixed price.

Services

CyberFundamentals Basic for suppliers

Your customer asks for CyberFundamentals Basic? Within two weeks you know where you stand and what to do.

For whom

Small companies (up to 50 staff, one site) whose customer requires a CyberFundamentals level, usually Basic, even if they are not in scope of NIS2 themselves.

First check whether NIS2 applies to you?Free NIS2 check, 3 minutes, nothing is sent

Why now

Customers in scope of NIS2 must manage the risks in their supply chain. That is why they increasingly ask their suppliers for a CyberFundamentals level, usually Basic.
The CCB framework is free, but its questions are technical. A poorly completed self-assessment costs you more time later than it saves now.

What you get

Completed CyberFundamentals Basic self-assessment, prepared with you and your IT partner.
Gap list in plain language: what is in place, what is missing and who can do it.
Step-by-step plan with priorities and a rough estimate of cost and time.
A summary you can send to your customer.
A half-hour debriefing.

Not included

Verification by an accredited body, if your customer asks for it.
Carrying out the measures: your IT partner does that; I write down what needs to happen.

Frequently asked questions

My customer asks for a level other than Basic.: Small is included at the same price. For Important, Essential or several sites, the NIS2 gap assessment is the right service.
Does my IT partner need to take part?: Ideally yes: an hour of their time saves you questions later. I do not take over their work; you choose who carries out the measures.
How does this differ from the NIS2 gap assessment?: Here I stay at the Basic level, one site and a smaller organisation. The work is smaller, and so is the fixed price.