Aligning Your Defence Strategy with the NCSC Cyber Assessment Framework 4.0

Industrial cybersecurity has shifted from isolated, legacy air-gapped systems to hyper-connected cyberphysical systems (CPS) that support the United Kingdom’s critical national infrastructure (CNI). As cyber threats continue to mature, the requirements for defending essential functions have become significantly more rigorous.

In response to this escalating threat environment, the National Cyber Security Centre (NCSC) released the Cyber Assessment Framework (CAF) version 4.0 in August 2024, with further refinements appearing in 2025. This update represents a fundamental move away from static, checkbox-based compliance toward a dynamic, intelligence-led model of operational resilience.

Claroty equips organisations tasked with meeting these new standards with the deep visibility, behavioural analytics, and threat-hunting capabilities necessary to satisfy the complex Indicators of Good Practice (IGPs) defined across the framework’s four core objectives.