NCSC's Cyber Assessment Framework for assessing cyber resilience of critical national infrastructure.
The Cyber Assessment Framework (CAF) is the NCSC's approach for assessing the cyber resilience of organisations providing essential services and critical national infrastructure. CAF covers four objectives: managing security risk, protecting against cyber attack, detecting cybersecurity events, and minimising impact of incidents. CAF uses Indicators of Good Practice (IGPs) to assess maturity. It's used by regulators across UK CNI sectors and aligns with NIS regulations.