The NCSC Cyber Assessment Framework (CAF), developed by the UK's National Cyber Security Centre (NCSC), provides organizations with a structured and systematic way to assess and manage cybersecurity risks. It is particularly useful for organizations within critical national infrastructure (CNI) sectors but is flexible enough for broader application. The framework is built around four main objectives: managing security risk, protecting against cyber-attacks, detecting cyber events, and minimizing the impact of incidents.