NCSC Cyber Assessment Framework (CAF)
Improved Cyber Resilience
Meeting the outcomes of the CAF provides a good baseline for cyber security. When combined with ongoing risk management, this allows organisations to continuously improve the cyber security posture of the environment to provide ongoing protection against threats.
Access to Technical Expertise
Draw on our consultant’s wider skill sets and knowledge in specific areas and technologies, such as public cloud infrastructure.
Access to a Wider Team
As part of a consulting engagement with Bridewell, our security development and software teams are available to develop innovative approaches to address a problem.
Assurance of a Reliable Service
By working with an NCSC-assured partner, your organisation has assurance of high-quality, thorough, recognised, bespoke cyber security advice.
Why CAF with Bridewell?
The CAF is a flexible framework intended primarily for use by organisations within the UK Critical National Infrastructure (CNI), particularly those in scope of the Network and Information Systems (NIS) Regulations as a result of the NIS Directive. However, its flexibility makes it equally applicable outside of CNI.
Bridewell has extensive experience with the CAF and has worked with organisations across industries and governments to perform assessments, develop remediation programs and also deliver managed services to satisfy specific outcomes within the framework.
Bridewell has expertise across on-premise, cloud and Operational Technology (OT). Our consultants work across a variety of technical environments and operating contexts to ensure the cyber resilience principles outlined in the framework align with their wider business objectives.
Bridewell provides a wide range of services to support organisations in applying the CAF across a variety of sectors. Whether the organisation needs to achieve compliance against NIS Regulations, or are just looking to enhance their cyber posture, aligning with this framework helps them both achieve and demonstrate an appropriate level of cyber resilience to manage their security risks.
Key Challenges
Organisations seeking to align themselves with the Cyber Assessment Framework may lack the expertise and resource to conduct a complete gap analysis of their current cyber security program, and subsequently remediate and shortfalls they identified.
Even for those with significant cyber security teams in-house, the lack of prescriptive controls within the framework can also make it difficult for those with less experience to understand how to achieve the principles, outcomes, and Indicators of Good Practice (IGPs) within the CAF.
How it Works
Bridewell supports clients in applying the CAF framework through a wide range of services. These include:
Leading assessments against the CAF.
Assisting clients with their CAF self-assessments and developing remediation programs.
- Operating as our client's cyber security team, fully managing the requirements of the CAF across their organisation and dealing with competent authorities.
Implementing the requirements of the CAF across on-premise, cloud and OT environments.
Managed Security Services to allow organisations to achieve many of the outcomes within the CAF.
FAQs
• The nature and criticality of the service provided.
• The operating environment of the service.
• The number of consumers of the service.
Indicators of Good Practice (IGPs) are then used to understand the measures required to meet the required outcome levels.
Cyber Security Insights
Ready to Take the Next Step?
We’re here to help, so to speak with our team and learn more about how Bridewell can benefit your organisation, just complete the below form and one of our experts will be in touch.
Related Cyber Security Services
)
Risk Management
Risk Management
)
Cloud Security
Cloud Security
)