Cyber Assessment Framework

CAF Support is helping 52 councils accelerate their cyber resilience improvements. We have now published our first practical resources, focused on CAF Objective A: Managing security risk, to help councils strengthen their cyber resilience.

We have launched a £6 million CAF Support Fund for 52 councils that have completed a CAF assessment, helping them accelerate improvements in key areas of cyber resilience and strengthen resilience across the sector.

In October 2024 we launched the Cyber Assessment Framework (CAF) for local government. Since then, 90 councils have completed a CAF assessment and many more are working on theirs. This blog shares what we have planned for 2026.

Get to know the team members supporting councils through their CAF journey and find out how we’ve helped councils build their resilience.

The cyber threat to local government is real, increasing, and evolving. Four years into the Cyber Support programme, we’re sharing insights from our cyber work.

In this short video, we explain what the CAF for local government is, the stages involved, and where to get started.

In this video case study, Norfolk County Council share their experience of the CAF for local government.

Maldon District Council share their experience of undertaking the Cyber Assessment Framework (CAF) for local government.

In this blog post, we’ll provide an update on our work to develop the CAF and share how your council can start getting ready.

As our first phase of the CAF for Local Government comes to an end, we’re keen to share some insights and feedback before we move forward.

We want to set a clear standard and expectation around cyber resilience for local authorities in England, based on the established NCSC Cyber Assessment Framework (CAF).

During a Cyber discovery in 2020, a Cyber Health Framework was identified as one of the main areas of opportunity to progress into an alpha project, supporting council staff to navigate numerous and sometimes overlapping standards.