Cyber Assessment Framework (CAF) Assurance

Provision of independent assurance reviews of Local Authority's self-assessments against the National Cyber Security Centre's Cyber Assessment Framework.

The Supplier shall: • Work with the Buyer (MHCLG) and councils to schedule councils who are ready for have their CAF self-assessment assured for an engagement.

This will include attending an onboarding meeting(s) and engaging with the council to ensure they are on track. • In some cases, the supplier may be required to provide additional guidance to councils who are undertaking a CAF assessment for the first time, to help them understand the process and the evidence required. • Complete an independent assurance review of council's self-assessments against the CAF for local government profile. • Access to evidence and information references in the self-assessment. • Hold interviews with key stakeholders to help complete an independent assurance review. • The finalisation of an assured workbook in accordance with a template provided by the Buyer.

Councils will then use this to finalise the Improvement and Implementation Plan they will formally submit to the Buyer. • The Buyer reserves the right to commission the Supplier to carry out similar assurance work for the Department where there is a requirement to do so.