Cybersecurity

NCSC Cyber Assessment Framework V3.2

NEW:  The NCSC Cyber Assessment Framework V3.2 Playbook.  Published on 15th April 2024 by the UK National Cyber Security Centre. 

It is aimed at helping an organisation achieve and demonstrate an appropriate level of cyber resilience in relation to certain specified vitally important functions performed by that organisation, functions that are at risk of disruption as a result of a serious cyber incident.

The NCSC Cyber Assessment Framework V3.2 Playbook addresses the following:

Principle: A1 Governance

Putting in place the policies, processes and procedures which govern your organisation’s approach to the security of network and information systems.

Principle: A2 Risk Management

Identification, assessment and understanding of security risk including the establishment of an overall organisational approach to risk management.

Principle: A3 Asset Management

Determining and understanding everything required to deliver, maintain and / or support essential functions.

Principle: A4 Supply Chain

Understanding and managing the security risks to networks and information systems which arise from dependencies on external suppliers.

Back (Small2)