How CNI-like organisations can benefit from appropriate application of the Cyber Assessment Framework (CAF)
We all rely on our Critical National Infrastructure (CNI); after all, that’s what it means. The good practices of its providers, suppliers and maintainers are crucial to those infrastructures being available when needed. It should be no surprise to say that this is a highly regulated space. Here in Europe, this typically means alignment to the EU Network and Information Systems (NIS-D) Directive, enforced in the UK via the UK Network and Information Systems Regulations (NIS-R) 2018.
This regulation requires providers to follow the Information Commissioner’s Office (ICO) guidance as the competent authority. At present, this means following the Cyber Assessment Framework (CAF) as published by the National Cyber Security Centre (NCSC). For organisations that fall within the scope of NIS (D), the CAF represents a statement of expectation about conducting operations within essential services.
CGI has considerable experience leveraging this framework in support of our clients. We believe the CAF is also useful as a toolkit to organisations outside of the pure CNI umbrella. For these organisations, the principles of the CAF need to be applied sensibly, cognisant of an organisation’s specific needs and business priorities and in support of established tooling and governance frameworks.
If you are interested in how we reached this conclusion and would like to understand whether your organisation could benefit too, please read the white paper now and get in touch.
For more information about CGI’s relationship with Dynamo North East, please contact Mark Thompson: firstname.lastname@example.org
Read more posts
We are delighted to welcome the newest addition to the Dynamo community – Secerna, a Chartered & European patent attorney firm providing service on the protection, enforcement and defence of…Read more
The Dynamo Advisory Board convene to discuss how to help drive the growth and success of the North East of England tech sector. One of the most important topics discussed…Read more
NRG proudly announces a strategic advancement in leadership and expansion to further cement our standing as a leader in the recruitment industry. In collaboration with our Recruitment Process Outsourcing (RPO)…Read more