NCSC Cyber Assessment Framework (CAF) Implementation

The National Cyber Security Centre (NCSC) Cyber Assessment Framework (CAF) provides a way of assessing the cyber risks to essential NHS functions, looking at how these are managed, and which organisation will be responsible.

As part of the CAF, the NHS Counter Fraud Authority (NHSCFA) is required to submit supporting evidence for a compliant submission to the NHS DSPT-CAF return for 2024-25.

NHS Counter Fraud Authority are seeking to procure support with the following requirements:

· Analysis of the NHSCFA Position regarding NHS Data Security and Protection Toolkit (DSPT) and CAF requirements for 2024-25.

· Assistance, alongside NHSCFA teams to collect, prepare & submit evidence required to form a compliant submission to the NHS DSPT-CAF return for 2024-25.

· Produce a roadmap to improve NHSCFA position in meeting DSPT-CAF requirements for future years, initially Baseline then Enhanced CAF requirements