NIS2 – Cyber Security
Is your business a “Safe Supplier”? In 2026, cybersecurity is no longer optional—it’s a license to operate.
The Belgian transposition of the European NIS2 Directive has permanently changed the B2B landscape. While the initial registration deadlines have passed, we are now approaching the critical April 18, 2026 milestone—the date by which “Essential” and “Important” entities must demonstrate active cybersecurity maturity.
Even if you think you are “too small” for NIS2, your clients’ legal departments do not.
The “Supply Chain” Trap
One of the most powerful elements of the Belgian NIS2 Law is the mandatory Supply Chain Security. Large companies (Banks, Energy, Transport, etc.) are now legally responsible for the security of their subcontractors.
- The Risk: If you cannot prove your cybersecurity maturity via the official Safeonweb@Work portal or a CyberFundamentals (CyFun®) assessment, your largest clients may be legally forced to terminate your contracts to protect their own compliance.
- The Reputation Hit: Being “unregistered” sends a signal that your business is a weak link in the digital chain.
The Consequences of Silence
- Administrative Fines: Failure to comply with supervision or information obligations can lead to administrative fines. While the headline figures for large firms are millions of Euros, the CCB (Centre for Cybersecurity Belgium) uses a “dissuasive” scale even for smaller entities to ensure the law is respected.
- Personal Liability: For the first time, company directors can be held personally liable for gross negligence in cybersecurity risk management.
- Registration Orders: The CCB has the power to issue binding orders to complete your registration and audit within strict 48-hour windows.
Our 2-Hour “Cyber Shield” Intervention
Bewebwise SRL handles the technical and administrative friction of the Safeonweb@Work ecosystem, ensuring your business remains a trusted B2B partner.
What We Do:
- Safeonweb@Work Registration: We guide you through the mandatory registration on the federal cybersecurity portal, ensuring all enterprise and establishment data is correctly mapped.
- CyFun® Gap Analysis: We conduct a rapid self-assessment using the official CyberFundamentals (BASIC level) framework, identifying the 10-15 specific recommendations your business needs to meet the “Small/Basic” assurance standard.
- Incident Protocol Setup: We establish the mandatory 24-hour incident notification workflow required by the NIS2 Law, so you know exactly who to call if a breach occurs.
Preparation Checklist
- Legal Access: The company manager must have their itsme or eID ready to authorize the “Safeonweb@Work” role assignment.
- Technical Assets: A list of your primary domain names and any static public IP addresses used by your office or services.
- IT Contact: Access to your current IT provider’s contact details to verify existing firewall and backup settings.
Financial Investment
- NIS2 Registration & CyFun Pack: 550 € (Includes portal registration + maturity assessment).
- 120% Tax Benefit: Professional cybersecurity implementation is a recognized digital transition cost, eligible for the 120% tax deduction.
“In the NIS2 era, cybersecurity isn’t an IT expense—it’s a sales tool. We ensure you stay on your clients’ ‘Approved Supplier’ list.”