Skip to content
A draft, not an assessment

A CyberFundamentals Basic summary, in your words

What the three levels are: CyberFundamentals

This is a draft. Each section offers an example: replace every [field] with what is true for you and delete the rest. Publishing it does not mean the measures exist, and Squaretrust does not check that they do. The level is something you state, not a score the product computes.

  1. The level this page is stating

    What the customer checks: the level you state, and what it rests on.

    Example to adapt

    We aim for the Basic level of the CyberFundamentals framework of the Centre for Cybersecurity Belgium. This page is a self-assessment dated [dd/mm/yyyy], [not verified by a third party / verified by a third-party body on dd/mm/yyyy].

    To attach: the verification report, if there is one (on request).

  2. Measures we have in place

    What the customer checks: what is actually in place today.

    Example to adapt

    In place: [an inventory of laptops and services], [automatic updates], [multi-factor authentication on email], [tested daily backups], [an incident procedure]. For each measure: since when, and who owns it.

    To attach: the related policies (on request).

  3. Measures we have not put in place

    What the customer checks: what is missing, said plainly: a customer trusts an honest list more than a perfect score.

    Example to adapt

    Not yet in place: [a documented restore test], [yearly staff training]. Planned for: [month yyyy]. Owner: [role].

  4. Who a customer can ask

    What the customer checks: who to ask a question or request evidence from.

    Example to adapt

    For any question about this page: [name, role], [email address]. We reply within [x working days].