Cyber Resilience Audit

These services are primarily delivered to government departments, the wider public sector, and organisations operating in Critical National Infrastructure or specifically-regulated sectors, although organisations outside of these spheres may also buy Cyber Resilience Audits for their own benefit. 

All CRA Assured Service Providers are assessed as meeting the NCSC technical standard for CRA and are entitled to use the associated NCSC logo.

We are currently updating the scheme standard to transition from Minimum Viable Product phase into Business as Usual operations.

While this work is underway,  we are unable to accept new applications for the remainder of 2026. We will announce the dates of the next application cycle in December. Please visit this website for updates and information on how to register when applications reopen.

Please note that future applications will be submitted against the new standard and accompanying documents when it is available, and not the published standard and working practices.

As an Assured Service Provider, you are responsible for ensuring that you meet any additional requirements set out by the Scheme Partners and attend any training specific to the sector if it is required by a Scheme Partner.

• Example application form
• CRA scheme standard
• Working practices

Scheme documents are also available from the Downloads section.