// Security
NCSC Cyber Assessment Framework Compliance Software
UK NCSC framework of 14 principles across four objectives for assessing cyber resilience of essential functions.
Framework at a glance
Short name
UK CAF
Version
3.2
Category
Security
Controls
14
What UK CAF covers
14 controls across 4 domains — every one tracked, owned and evidenced in Cyber Horizon.
A. Managing Security Risk
4 controls- A1 Governance
- A2 Risk Management
- A3 Asset Management
- A4 Supply Chain
B. Protecting Against Cyber Attack
6 controls- B1 Service Protection Policies & Processes
- B2 Identity & Access Control
- B3 Data Security
- B4 System Security
- B5 Resilient Networks & Systems
C. Detecting Cyber Security Events
2 controls- C1 Security Monitoring
- C2 Proactive Security Event Discovery
D. Minimising the Impact
2 controls- D1 Response & Recovery Planning
- D2 Lessons Learned
How Cyber Horizon automates UK CAF
Every UK CAF control lives in a shared control library, crosswalked to the other frameworks you run — evidence collected once counts everywhere it applies.
Evidence is collected automatically from your connected tools, with owners, review cadences and gaps tracked continuously instead of at audit time.
Audit packs generate on demand, and the risk register, vendor risk and threat intelligence sit in the same platform — one evidence trail across your whole programme.
Frequently asked questions
What is NCSC Cyber Assessment Framework?
UK NCSC framework of 14 principles across four objectives for assessing cyber resilience of essential functions.
How many controls does NCSC Cyber Assessment Framework have?
NCSC Cyber Assessment Framework (3.2) has 14 controls in Cyber Horizon's catalogue, organised across 4 domains.
How does Cyber Horizon help with NCSC Cyber Assessment Framework?
Cyber Horizon maps NCSC Cyber Assessment Framework into a shared control library alongside every other framework you run, so evidence collected once counts towards UK CAF and everything else it overlaps with. Controls, evidence status and audit packs live in one place, with automated collection from your connected tools.
More Security frameworks
See UK CAF mapped to your environment
Start with the free 20-question readiness check — no signup — or get a personal walkthrough of UK CAF in Cyber Horizon.