UK NCSC Cyber Assessment Framework
UK NCSC Cyber Assessment Framework v3.2 (used by NIS Regulations 2018 competent authorities and Cabinet Office GovAssure).
UK NCSC Cyber Assessment Framework is a compliance framework from United Kingdom with 4 domains and 4 controls. The largest domains are Detect (1 controls), Manage Risk (1 controls), Protect (1 controls). Every control below carries what it requires and what an assessor expects to see.
Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.
Framework Domains (4)
Detect
| Code | Title |
|---|---|
| UKCAF-C | Objective C: Detecting Cyber Security Events |
Manage Risk
| Code | Title |
|---|---|
| UKCAF-A | Objective A: Managing Security Risk |
Protect
| Code | Title |
|---|---|
| UKCAF-B | Objective B: Protecting Against Cyber Attack |
Respond and Recover
| Code | Title |
|---|---|
| UKCAF-D | Objective D: Minimising Impact of Cyber Incidents |
What is UK NCSC Cyber Assessment Framework and who does it apply to?
UK NCSC Cyber Assessment Framework is a compliance framework from United Kingdom with 4 domains and 4 controls. UK NCSC Cyber Assessment Framework v3.2 (used by NIS Regulations 2018 competent authorities and Cabinet Office GovAssure). It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.
What does UK NCSC Cyber Assessment Framework actually require?
UK NCSC Cyber Assessment Framework has 4 controls organised across 4 domains. The largest domains are Detect (1 controls), Manage Risk (1 controls), Protect (1 controls). Each control defines specific requirements that organisations must implement to achieve compliance.
If I already comply with another framework, how much of UK NCSC Cyber Assessment Framework do I already cover?
UK NCSC Cyber Assessment Framework does not currently have cross-framework mappings in our system. Check back as we continuously expand our mapping database.
How do I implement UK NCSC Cyber Assessment Framework?
Start your UK NCSC Cyber Assessment Framework compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about UK NCSC Cyber Assessment Framework requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 4 controls and track your progress.
Start Your Compliance Journey
Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 686 frameworks.
Get Started Free →Free forever — no credit card required