Cyber Fundamentals (CyFun) Consultancy
Strengthen your cyber resilience and prepare for NIS2 with expert Cyber Fundamentals (CyFun) consultancy. We help organisations assess their current cybersecurity maturity, align with the National Cyber Security Centre’s Cyber Fundamentals framework, and build a practical roadmap towards stronger security governance and regulatory compliance.
The challenge
What is Cyber Fundamentals?
The National Cyber Security Centre (NCSC) recommends the Cyber Fundamentals (CyFun) scheme as a structured, voluntary tool to assist entities in meeting their NIS2 obligations. Cyber Fundamentals is based on the NIST Cybersecurity Framework. It provides practical, actionable controls to help entities improve their security posture and meet their obligations. The Cyber Fundamentals Framework Maturity Levels are:
5 - Optimizing
4 - Managed
3 - Defined
2 - Repeatable
1 - Initial
Why do I need to comply?
CyFun is a recommended approach for NIS2 compliance assurance, in advance of certification, and is the preferred method of the NCSC’s own National Competent Authority for Public Administration for demonstrating compliance with NIS2.
Our Service:
BH Consulting provide 3 main services in relation to Cyber Fundamentals
Cyber Fundamentals Readiness Assessment; a gap analysis of the organisations current security maturity (scale 1-5) against all the required controls for its chosen level, Important or Essential, against the CyFun Framework.
Cyber Fundamentals Alignment Service; as the CyFun framework is based on NIST CSF, BH Consulting provide an alignment service based on the six key cybersecurity functions:
- Govern: Determining how an organisation’s cybersecurity risk management strategy, risk appetite and policy are established, communicated, and monitored
- Identify: Understanding organisational risks, assets, and vulnerabilities
- Protect: Implementing controls to prevent cybersecurity incidents
- Detect: Developing capabilities to recognise and respond to threats
- Respond: Establishing incident response and mitigation procedures
- Recover: Ensuring business continuity and resilience following incidents
Ongoing Managed Compliance Service; to ensure ongoing alignment with the CyFun framework, BH Consulting offer an outsourced managed service which includes:
- Carrying out periodic meetings for on-going monitoring and enhancement of information security management
- Security health checks and risk assessments
- Internal Audit
- Ensuring that security tasks are carried out such as Security Awareness Training for staff, Test and Assurance of systems and Policy Management
- Testing of security controls and processes, such as vulnerability assessments and Incident Response tabletop exercises
Benefits
By structuring compliance around the core elements, CyFun provides a flexible but comprehensive framework that can be adapted across multiple sectors
CyFun is a business enabler that can serve as a trust building mechanism in supply chains and with regulatory authorities
The framework provides a risk-based approach to help entities meet their cyber risk management obligations and is seen as a strong and credible route to support compliance with NIS2
CyFun is built on the internationally recognised US based National Institute of Standards and Technologies Cyber Security Framework (NIST CSF).
Testimonials
“We engaged the services of BH Consulting in September to act as our DPO. Our DPO Annemarie, understands the way in which we work and has completely adapted her approach to suit our needs. I couldn’t recommend Annemarie and the team at BH consulting highly enough.”
“The expertise BH Consulting provided to ensure we have a robust GDPR compliance framework in place was great. We would have no hesitation recommending BH Consulting to others in a similar position.”
“Make-A-Wish Ireland has been working with BH Consulting for three years and have found them to be incredibly supportive. The support we have been given is practical, logical, and most importantly calming. We would highly recommend any company to work with BH Consulting.”
“BH Consulting have been our CISO since February 2019 and we have found their expertise to be extremely beneficial. We really like the fact that they are independent and not tied to any vendors or solutions.”
“BH Consulting provide a reliable and valuable service to our organisation. Their expertise and continued guidance has been a great support to us since the introduction of GDPR.”
Why get in touch with BH Consulting
BH Consulting is a trusted, independent cybersecurity and data protection consultancy with over 20 years of experience. Whether you need expert guidance on compliance, risk management, or security strategy, our team delivers practical, vendor-neutral advice tailored to your needs.
- Trusted by global brands and public sector bodies
- ISO 27001-certified team with deep domain expertise
- Proven track record in delivering real-world solutions
- Flexible services: CISO/DPO as-a-Service, audits, training & more
Let’s start a conversation about securing your business.
