Guidance
Cyber Assessment Framework
The CAF is a collection of cyber security guidance for organisations that play a vital role in the day-to-day life of the UK, with a focus on essential functions.
Page 25 of 25
Cyber Assessment Framework (CAF) changelog
iStock.com/Jagrutiben Patel
List of the different versions of the Cyber Assessment Framework (CAF) guidance, when each of these were released and downloads.
| Date | Description | Version | Changelog | Download CAF |
|---|---|---|---|---|
| 4 August 2025 | v4.0 CAF released | v4.0 | v3.2 - v4.0 (pdf) | CAF v4.0 (pdf) |
| 15 April 2024 | v3.2 CAF released | v3.2 | v3.1 - v3.2 (pdf) | CAF v3.2 (pdf) |
| 11 April 2022 | v3.1 CAF released | v3.1 | v3.0 - v3.1 (pdf) | CAF v3.1 (pdf) |
| 30 September 2019 | v3.0 CAF released | v3.0 | CAF v3.0 (pdf) | |
| 31 October 2018 | v2.0 CAF released | v2.0 | CAF v2.0 (pdf) | |
| 30 April 2018 | First release NIS guidance and CAF | v1.0 | CAF v1.0 (pdf) |