Cyber Fundamentals 2.0

Cybersecurity guidance is most effective when it is practical, proportionate and aligned to your organisation’s risk profile. In this 45-minute webinar, we explore the updated Cyber Fundamentals Framework (CyFun 2025) and how it can be applied in a realistic, risk-based way across organisations of different sizes and sectors. The session will cover: The evolution of the CyFun Framework and what has changed in 2025 How the framework is structured and how it aligns with recognised cybersecurity and risk standards Practical steps for establishing CyFun within your organisation How to move from guidance to action and get the framework implemented This webinar is suitable for boards, senior management, risk, IT and compliance teams looking for clear, achievable cybersecurity guidance without unnecessary complexity. Video Chapters 00:00 – Welcome and session housekeeping 01:14 – Agenda & introduction to Cyber Fundamentals 01:46 – Evolution of the Cyber Fundamentals (CyFun) Framework 02:43 – The 3 Assurance Levels: Basic, Important, Essential 04:39 – CyFun 2025 (Version 2) & EU regulatory adoption 07:24 – Structure: The 6 NIST Functions (Govern, Identify, Protect, Detect, Respond, Recover) 08:04 – Key changes from CyFun 2023 to 2025 09:23 – NIS2 incident reporting obligations (Article 23) 11:50 – Aligning CyFun with ISO 27001, IEC 62443 & CIS Controls 14:37 – Practical implementation: Selecting your target assurance level 16:34 – Deep dive into Basic, Important, and Essential controls 18:26 – Control counts across CyFun, ISO 27001, and NIST 20:07 – CyFun for Small Organisations: 7 Fundamental Security Measures 23:31 – Determining required levels using sector impact models 25:28 – Practical Asset Management (ID.AM) across assurance levels 29:08 – Where to start: Establishing governance & leadership backing 31:42 – Conducting a CyFun gap analysis & setting realistic goals 33:12 – Assessing documentation & implementation maturity (Levels 1–5) 36:55 – Balancing cost, complexity, and target maturity levels 39:02 – Q&A: CyFun certification & cross-framework recognition 41:07 – Why CyFun works: Accessible language & whole-organisation security 42:48 – Closing remarks & webinar wrap-up