Cyber Fundamentals (CyFun) Basic Training

Updated July 2025

Download this specification

Future-Proof Your Business: Practical Steps to Elevate Your Security with Cyber Fundamentals (CyFun) Basic for SMEs

This course is for small and medium businesses owners ready to formalise their cybersecurity approach, minimise common cyberattack risks, and significantly enhance their digital security. It's about building a robust, structured defence to protect valuable assets, maintain customer trust, and ensure operational continuity in a hostile online environment. Mastering Cyber Fundamentals (CyFun) Basic isn't just about compliance. It's about strategic risk management and safeguarding your business's future.

High-Level Outline:

  1. Elevating Your Cyber Strategy - From Basics to Resilience.
  2. Identify - Deeper Insights into Your Digital World.
  3. Protect - Building a Comprehensive Defence.
  4. Detect, Respond, Recover - Structured Resilience.
  5. Continuous Improvement & Strategic Partnership.

Objectives:

Upon completion of this course, participants will be able to:

  • Understand the fundamental concept of cybersecurity and why it's critical for their specific business.
  • Grasp the implications of the five core functions of the CyFun framework (Identify, Protect, Detect, Respond, Recover)
  • Identify and implement more formalised and systematic approaches to data protection and access control.
  • Develop a clearer understanding of security awareness training for employees and its critical role.
  • Recognise the importance of third-party risk management in their supply chain.
  • Confidently engage with IT support to implement and maintain CyFun Basic controls.
  • Establish a framework for continuous improvement of their cybersecurity posture.

Learning Outcomes:

By the end of this course, attendees will be able to:

  • Categorise critical business information and systems based on their value and sensitivity.
  • Understand the concept of a "supply chain" from a cybersecurity perspective and identify associated risks.
  • Apply formal policies and procedures to protect their data and systems.
  • Develop a structured incident response plan and recover their operations smoothly.
  • Collaborate with IT and external providers to enhance security.
  • Establish a regular review process to capture any changes to the business and it’s environment.

Additional Details:

Course Duration: 6 Hours (Flexible, can be adapted)

Included: A plain English guide to the various controls required by CyFun Basic, an IT Diary, guides on Password Manager use, Multi-Factor Authentication set-up, Asset Inventory, Backup and Recovery. Also, a copy of the slides will be provided.

Audience: Small/Medium Business Owners/Managers or Charity Managers responsible for day-to-day operations of the business.

Capacity: Maximum 20 attendees.