CyFun Small today. Basic tomorrow.
ISO 27001 next year. Zero rework.
Evidence collected once counts everywhere. Add a framework — existing proof carries over automatically.
How Evidence Reuse Works
You complete MFA evidence for CyFun Small PR.01.
Later, you enable CyFun Basic. The system:
- Creates new control pages
- Maps Small PR.01 → Basic PR.01
- Shows: "✅ Satisfied by cyfun-small/pr/mfa-policy"
- Only highlights the NEW gaps
No re-uploading. No re-checking. No duplicate work.
The Upgrade Path
1
CyFun Small (7 categories)
2
CyFun Basic (34 controls)
3
CyFun Important (99+ controls)
4
ISO 27001 (93 controls)
↓ evidence carries over at each step ↓
Each step: you only do the DELTA. Not the whole thing again.
Why This Matters for Your Clients
A healthcare client starts with CyFun Small. Next year, regulation requires Basic. The year after, they want ISO 27001 for a government contract.
With ECP: each upgrade is incremental.
With anything else: they start over.
Future-proof compliance. Real recurring revenue.
