Cyber Assessment Framework (CAF) Assurance

Provision of independent assurance reviews of Local Authority's self-assessments against the National Cyber Security Centre's Cyber Assessment Framework.

The Supplier shall:

• Work with the Buyer (MHCLG) and councils to schedule councils who are ready for have their CAF self-assessment assured for an engagement. This will include attending an onboarding meeting(s) and engaging with the council to ensure they are on track.

• In some cases, the supplier may be required to provide additional guidance to councils who are undertaking a CAF assessment for the first time, to help them understand the process and the evidence required.

• Complete an independent assurance review of council's self-assessments against the CAF for local government profile.

• Access to evidence and information references in the self-assessment.

• Hold interviews with key stakeholders to help complete an independent assurance review.

• The finalisation of an assured workbook in accordance with a template provided by the Buyer. Councils will then use this to finalise the Improvement and Implementation Plan they will formally submit to the Buyer.

• The Buyer reserves the right to commission the Supplier to carry out similar assurance work for the Department where there is a requirement to do so.

Additional information: This is a call-off from the Government Commercial Agency G-Cloud 14 framework.