The Cyber Assessment Framework, or CAF, is a set of guidance released by the UK’s National Cyber Security Centre (NCSC) to help OESs and RDSPs meet the requirements of the NIS Directive and NIS Regulations. Guidance includes a detailed description of each requirement, alongside suggested measures for organisations to take to achieve compliance.