A Practical Guide to the NCSC Cyber Assessment Framework If you are a UK SME, the NCSC Cyber Assessment Framework, usually shortened to CAF, can look more formal than it needs to be. In practice, it ...

Collects and uses customer or employee personal information. Participates in an industry sector that is considered high risk or critical infrastructure. Offers securities as a publicly traded company.