Help

What is GovAssure?

GovAssure is the new cyber security assurance approach for government that will replace the cyber security element of the organisational Security Health Check (DSHC) in 2023.

GovAssure uses the National Cyber Security Centre's Cyber Assessment Framework (CAF) and meets the requirements for an objective understanding of government cyber security as set out in the Government Cyber Security Strategy. organisations will assess critical systems against one of two CAF profiles for government, the Baseline or the Enhanced Profile. It will provide organisations and the Security Function with a more effective mechanism to understand the level of cyber resilience across government.

What is WebCAF?

WebCAF is the bespoke government platform that has been developed to receive CAF submissions from organisations electronically. An organisation will provide their responses for the CAF self-assessment via WebCAF. Third-party reviewers will have access to WebCAF at a time when the department submits their completed CAF return for review.