The UK’s National Cyber Security Centre (NCSC) has released version 4.0 of the Cyber Assessment Framework (CAF), setting updated expectations for how critical organisations manage cyber risk and resilience. 

CAF v4.0 strengthens requirements for threat understanding, behavior monitoring, proactive threat hunting, and resilience against AI-enabled risks. It reflects the government’s continued push for proactive, intelligence-driven security across critical national infrastructure and beyond. 

Unlike generic cybersecurity frameworks, the CAF applies to both information technology (IT) and operational technology (OT) environments. It helps organisations identify, protect, detect, and respond to the threats targeting essential services. 

Dragos aligns directly with CAF v4.0, combining the Dragos Platform, OT threat intelligence, and expert services to help organisations: 

• Gain OT/IT/IOT asset visibility and risk-based vulnerability management. 

• Monitor adversary behaviors with intelligence-driven threat and anomaly detection. 

• Enable structured, proactive threat hunting in the Dragos Platform. 

• Minimise impact with OT-specific incident response and recovery expertise. 

• Leverage intelligence at every stage – from anticipating adversary methods, to sharpening detections, to driving faster, more effective response. 

Learn how CAF v4.0 impacts your organisation and how Dragos can help you meet these enhanced requirements.