NIS2 · CyFun

A clear path to
NIS2 compliance.

You start for free, with a maturity self-assessment on the CyFun framework and a clear implementation plan. If you wish, we support you through consulting services, self-assessment and drawing up the implementation plan.

Free access to the platform, no card required.
Aligned with the official CyFun framework·DNSC-certified auditors
A team of compliance professionals
~15,000
organizations covered by NIS2 in Romania
~15,000
organizations covered by NIS2 in Romania
136
CyFun requirements, Important level
218
CyFun requirements, Essential level
60days
for the risk analysis after DNSC issues the decision
NIS2CyFunDNSCRisk assessmentRegistersIncident reportingAuditSelf-assessmentOUG 155/2024Law 124/2025NIS2CyFunDNSCRisk assessmentRegistersIncident reportingAuditSelf-assessmentOUG 155/2024Law 124/2025
Before the self-assessment

Two free steps, in the right order

You complete them right here, in a few minutes. We tell you exactly where you stand before you start the maturity self-assessment.

Step 1

Classification and registration

See whether you fall under NIS2 and at what level, important or essential, according to the classification of entities. Afterwards, we prepare your notification for registration with DNSC, ready to sign and submit, in line with Order 1 of OUG 155/2024. Without the correct classification, you don't know what obligations you have or where to begin.

Step 2

Initial risk assessment

After the classification decision issued by DNSC, you have 60 days to submit the initial risk analysis, in line with Order 2 of OUG 155/2024. You can do it now, following the official DNSC methodology and tools, and find out your organization’s risk level, useful for the next step, the maturity self-assessment, in line with Art. 18(7) of OUG 155/2024.

Clarity

You know exactly where you stand, what level you fall into and what to do next. No uncertainty.

A single partner

Entity classification, risk assessment, self-assessment and action plan, all in one place. You don't need multiple suppliers, you already have everything integrated and available through Certudo.

Official alignment

We work on the CyFun framework required by DNSC, with DNSC-accredited cybersecurity auditors on the team, directly involved in transposing European legislation, Directive (EU) 2022/2555, into Romanian law (OUG 155/2024, the NIS2 Law), alongside DNSC.

What we do

Services you can access now

From classification to the implementation plan, we give you clarity at every step.

Classification and registration

You check whether you fall under NIS2 and at what level, then we prepare your notification for registration with DNSC. Free.

Risk assessment

We estimate the disruptive effect using the DNSC risk assessment methodology and the target CyFun level. Free.

Self-assessment and plan

The CyFun maturity self-assessment and a plan for implementing the technical and organizational security measures. Free access, with optional consulting.

See all services

The maturity self-assessment and the implementation plan

You create a free account, complete the maturity self-assessment on the CyFun framework and receive a risk-prioritized implementation plan. For execution, we also offer consulting on implementation and audit.

  • The maturity self-assessment, with a score across the six CyFun functions
  • Reaching the maturity level, important or essential, clear from the start
  • A prioritized implementation plan, ready to put into practice
  • Optionally, consulting on the self-assessment (the initial audit or gap analysis) and on revising the plan

The self-assessment and the plan are free. Consulting is priced according to the type of entity.

How it works
1

You assess yourself

You complete the maturity self-assessment, for free, with a score across the six functions.

2

You receive the plan

An implementation plan built around your risk context, ready to download.

3

Ask a specialist

Optionally, a consultant reviews the self-assessment and the plan with you.

Why Certudo

Built by experienced professionals

The founding team has 15 years of experience in cybersecurity, audit and compliance. Team members are involved in DNSC's NIS2 projects, develop cybersecurity solutions and products, carry out qualified audits through DNSC-accredited auditors, and implement Information Security Management Systems based on EU standards, regulations and directives (ISO 27001, SOC2, CRA, TISAX, ISO 27701, CyFun, NIST CSF, HIPAA, ISO 42001, etc.). We also have experience in delivering cybersecurity products and services, including implementation consulting, actual implementation, CISO as a Service and NIS officer services (CaaS, vCISO), in line with Art. 14 of OUG 155/2024, and auditing of Information Security Management Systems (ISMS).

The Certudo team at work
General-type DNSC-attested cyber security auditors on the team
Certified CISM, CEH, ISO 27001 Lead Auditor, ISO 42001 Auditor
Over 20 years in compliance and security platforms, with projects for European institutions
Specialisation in NIS2 and the CyFun framework, in Romania

Check your maturity level

The free assessment gives you a score across the six CyFun functions and your next steps. No obligations.

Check your classification