CyFun® 2025 Converter — change log
Version 2.0 — September 2026
What the tool now does
- Two inputs. A CyFun 2023 assessment or a CyFun 2025 assessment made with the previous template (both v2025-10-21). The level and the template version are detected automatically; a file already on the latest template is refused.
- Two outputs. The latest CCB templates — BASIC and IMPORTANT v2026-02-20, ESSENTIAL v3.1 — in two copies: one with the template defects corrected, one with the template exactly as published. Same scores and comments in both; each says in its
ConversionLog which copy it is.
- A summary page. A self-contained HTML summary of the assessment and of the conversion, offered next to the Excel file.
- A validator. Accepts both input kinds, detects level and versions, and checks scores, comments, unexpected writes, deleted measures, template integrity, completion date, the N/A rules, the Summary chart,
NA_Count and the dropdowns.
Defects corrected in the CCB template
Each correction is named, cell by cell, on the result page, in the ConversionLog of both copies and in the summary. The full audit is on the template issues page.
- Two change a maturity score. ESSENTIAL
PROTECT!L3 averaged rows 3–24 although the PR.AA category spans rows 3–28. IMPORTANT RECOVER!J4:J7 lacked the N/A substitution, so an excluded measure dropped out of the average instead of counting as 3, inflating the score. The tool reports the impact on your own figures, and says so when there is none.
- Unreadable text. The requirement of GV.RR-02.1 was white on white; an invisible leftover flag on PR.PS-04.1 is removed.
- Shared comment cells. The cells the template merges across two measures are unmerged so each keeps its own comment; in the as-published copy both texts are written into the shared cell, prefixed with their identifier.
- Identifiers and spacing. Control identifiers normalised in seven cells, fourteen double spaces removed, and the management-aspect flag worded consistently. No word of a requirement is ever changed.
Nothing else is modified: every other formula, requirement text and structure is identical to the published template, and an automated test compares all of them on every build.
Accuracy and fidelity
- The Summary radar chart and every score dropdown are preserved, including the key-measure lists that version 1 silently dropped.
- Scores are computed the way the CCB Summary sheet does — the average of the category scores — instead of a flat average over the measures. The IMPORTANT threshold is 3/5, as on the Maturity Levels tab.
- The 2023 to 2025 mapping was compared with the CCB's own published mapping: the two agree on all 195 pairs and all 24 deleted measures.
- ESSENTIAL scores can differ from the previous template with identical inputs, because the CCB corrected several PROTECT category formulas in v3.1.
Excluded measures (N/A)
Up to 1 (BASIC), 3 (IMPORTANT) or 5 (ESSENTIAL) measures may be excluded, never a key measure and, at ESSENTIAL, never a measure linked to the management aspects. The tool never sets N/A; it reports how many are used, flags those the template does not allow, and lists the lowest-scored measures where an exclusion is permitted.
Previous version
The previous release of the converter, which produces the CyFun 2025 template of 21 October 2025, remains available at Version 1.0.
Reference pages
Every measure of the framework, with the 2023 measure it comes from and what changed, is on the measures page. Every requirement text that differs is shown word by word on the measure descriptions page.