Frequently asked questions
Answers to frequently asked questions
About how we work, working days, access, certification and Cyberwise ISMS. Can’t find your question? Feel free to get in touch.
What do you mean by a ‘working day’?
A working day equals one day of expert time. That time is spread over the agreed activities, such as interviews, analysis and reporting. So the number of working days says nothing about the overall lead time.
How long does the Cyberwise Baseline take?
The effort is around ten working days. The overall lead time depends on scheduling the interviews and getting access to your systems. We agree this together at the start.
Do you implement technical measures yourselves?
No. Your IT partner or IT team implements the technical measures. We assess, guide and check whether the agreed results have been achieved.
Do I have to switch IT partners?
No. We work with your current IT partner or IT team, and you remain free to choose your partner.
Will I get a certificate after an assessment?
No. An assessment gives you insight and a roadmap. If you want to get certified, for example for ISO/IEC 27001, we prepare you for it. The certification itself is carried out by an accredited certification body.
Is certification mandatory under NIS2?
Not necessarily. The conformity route that applies depends on your organisation. In Belgium, for example, this can be through CyberFundamentals (CyFun) or ISO/IEC 27001. We look at what applies to you together.
What access do you need?
That depends on the service. Usually it involves agreed read access, exports or a guided session with your administrator. We agree the access and any test windows in writing beforehand.
How do you handle confidential information?
Confidentially, in line with the terms of the agreement. Our information security management system is ISO/IEC 27001 certified by DNV.
Where is my data stored in Cyberwise ISMS?
In a dedicated, separated customer environment within the Cyberwise Microsoft 365 tenant. Your employees access it as guests. When the contract ends, you receive an export of your data.
How long do Sustain service agreements run?
The services run under a 1-year or 3-year agreement. We combine services to suit your organisation.
How much does it cost?
We put together a tailored proposal and share the price on request. The VLAIO programmes have fixed, public rates, which you’ll find on the VLAIO page.
Do you also work in the Netherlands?
Yes. We support organisations in both Belgium and the Netherlands, for example with the Dutch Cybersecurity Act.
Want to know where you stand?
Tell us what challenges you are facing. In a no-obligation introductory call, we look at what your organisation needs and what a sensible first step would be.