How a global food-ingredients manufacturer uses Secrato to run CyFun as a living maturity programme — targeting the Important assurance level and NIS2 compliance across its European sites.
Key takeaways
- CyFun is Fuji Oil Europe’s structured route to NIS2 — with the ambition to reach the Important assurance level.
- CyFun maturity is tracked continuously, with a clear target of at least maturity level 3 across sites.
- NIS2, CyFun, ISO 9001 and GDPR sit on one EU-hosted platform, so evidence is captured once and reused.
Industry: Food ingredients & manufacturing · Platform: Secrato Enterprise
The challenge
Fuji Oil Europe is part of a global food-ingredients group, producing specialty oils, fats, cocoa fillings and coatings from its Ghent headquarters and across multiple European sites. As an industrial operator in scope for NIS2, it chose CyberFundamentals (CyFun) as the structured framework to get there — alongside ISO 9001 for food-grade quality and GDPR. But running a maturity programme across several sites in spreadsheets made it hard to see where the organisation really stood, or how far it was from its target assurance level.
Why Secrato
Fuji Oil Europe uses Secrato Enterprise to run CyFun as a living maturity programme rather than a once-a-year exercise. Controls are scored continuously, the current maturity level is visible at a glance, and the gap to the target — the CyFun Important assurance level and maturity level 3 — is clear at all times. Because the same controls and evidence map to NIS2, ISO 9001 and GDPR, progress on CyFun directly evidences NIS2 compliance, with nothing re-collected per framework.
The result
A measurable path toward the CyFun Important level and NIS2 compliance, maturity tracked in real time instead of once a year, and far less manual effort across a complex, cross-border supply chain.
“Our ambition is clear: reach the CyFun Important level and use that to be NIS2 compliant — not just tick a box once a year. With Secrato we see our maturity across every site in real time and exactly how far we are from level 3, and the same evidence covers ISO 9001 and GDPR too.”
Kristof Finck
ICT Manager, Fuji Oil Europe
