The Cyber Assessment Framework (CAF)

The Cyber Assessment Framework (CAF) helps organisations strengthen their defences across the UK’s critical national infrastructure (CNI). Version 4.0 supports updates to the NIS Regulations through the Cyber Security and Resilience Bill and complements initiatives such as Cyber Essentials and adversary simulation services. CAF v4.0 represents a shift from static compliance to a dynamic, threat-informed approach that helps enterprises, government, and institutions protect essential services and maintain national resilience.