Business Challenge
Amid a rapidly evolving cyber threat landscape, a major energy provider needed to demonstrate adequate controls across all principles of the National Cyber Security Centre’s (NCSC) Cyber Assessment Framework (CAF). Meeting these Indicators of Good Practice (IGPs) was essential to safeguard critical infrastructure and ensure continuity of operations.
Systal’s Solution
Systal’s Professional Services team engaged with the client to deliver a structured CAF compliance programme aligned to version 3.1 of the framework. This included the identification and documentation of security controls and measures across all four CAF objectives:
- Objective A: Managing Security Risk
- Objective B: Protecting Against Cyber-attack
- Objective C: Detecting Cyber Security Events
- Objective D: Minimising the Impact of Cyber Security Incidents
Key Outcomes
- Successfully achieved ‘Basic’ NCSC CAF Compliance
- Delivered comprehensive documentation aligned to all 155 IGPs across 36 outcomes
- Controls validated through 1st, 2nd, and 3rd Line Assurance
- Programme completed in just 4 months, including a final Lessons Learned review
- Client is now preparing for ‘Enhanced’ CAF compliance
Business Impact
By achieving CAF compliance, the client strengthened its cybersecurity posture, reduced risk exposure, and enhanced its operational resilience across critical national infrastructure. Systal’s expert guidance ensured a smooth, auditable process that laid the groundwork for future compliance enhancements.