Cyber Assessment Framework (CAF) for local government
Guidance for councils in England to assess their cyber resilience.
The Cyber Assessment Framework (CAF) is a framework developed by the UK’s National Cyber Security Centre. It has been adapted for local government by the Ministry of Housing, Communities and Local Government to improve cyber resilience across the sector.
What the CAF involves
Understand the CAF
What the framework involves and why it’s important for local government.
Prepare for the CAF
Decide the scope of your self-assessment and who needs to be involved.
Complete your self-assessment
Guidance on how to complete an accurate self-assessment.
Assure your self-assessment
Guidance on the independent assurance process.
Submit your progress to MHCLG
How to share information about the CAF with MHCLG.
Useful resources
- Local Digital: Cyber Assessment Framework for local government
- National Cyber Security Centre: CAF Guidance
- GOV.UK: Government Cyber Security Strategy (2022 to 2030)
- Local Government Association: Cyber 360 Framework