The NCSC Cyber Assessment Framework (CAF) was designed to offer a comprehensive and systematic approach for organisations to manage cyber security risk. It was developed by the National Cyber Security Centre (NCSC) to support the implementation of the Network and Information Systems (NIS) Regulations 2018 (which are, themselves, based on the European Union (EU) Directive on Security of Network and Information Systems (NIS Directive) 2016).
The purpose of the CAF was originally to help ensure the reliability and security of network and information systems for essential functions. For example, Critical National Infrastructure (CNI) like electricity, water, oil and gas. However, because it is designed to be flexible and adaptable, the CAF is also a very useful guide for other types of organisations that want to improve their cyber resilience. For example, NHS Digital recently assured all their services against the CAF framework, and GovAssure (the new cyber security assurance approach for government), uses the CAF to assess all systems deemed critical.
Visit here for more information - https://www.littlefish.co.uk/cyber-security/ncsc-cyber-assessment-framework-guide/
