Cyber Resilience Audit

Cyber Resilience Audit (CRA) scheme members are companies that have been assessed as meeting the standards set by the National Cyber Security Centre (NCSC) to deliver independent cyber security audits. These audits will be conducted against the Cyber Assessment Framework (CAF).

The Cyber Resilience Audit (CRA) helps organisations assess their cyber security maturity against the NCSC’s Cyber Assessment Framework (CAF). It is aimed mainly at organisations who are classed as Operators of Essential Services (OES), although it can be used by any company seeking an independent audit of their cyber resilience.

The Cyber Assessment Framework helps organisations achieve and demonstrate that they have a proportionate level of cyber security and resilience relating to the essential functions they provide.

This enables a risk-based, outcome-driven audit that focuses on resilience rather than a simple compliance exercise.

The CAF framework is a recognised cyber security framework, developed by the NCSC to help organisations assess their ability to manage cyber risks, protect critical services, detect threats, and recover from incidents.

There are 4 high-level objectives:

Underpinned by fourteen principles, the framework provides a practical benchmark for measuring cyber resilience and identifying areas for improvement.

Our team have extensive experience in helping organisations understand, assess and manage cyber risk. We recognise that effective cyber security must move beyond demonstrating compliance alone. We ensure that an organisation’s resilience capabilities are proportionate to the critical services they deliver.