CAF 4.0 Framework Alignment

Standardised Auditing

SIFTR V2 is strictly anchored to the NCSC Cyber Assessment Framework (CAF) 4.0. Our engine uses a deterministic mapping to the official 41 Contributing Outcomes.

Scope of Analysis

The platform validates evidence against the four primary CAF objectives:

• Objective A: Managing Security Risk
• Objective B: Protecting Against Attack
• Objective C: Detecting Events
• Objective D: Minimising Impact

IGP Logic

Findings are categorised using the official NCSC Indicators of Good Practice (IGP): Achieved, Partially Achieved, or Not Achieved.