Map your critical systems architecture

We recently published guidance on how to map your critical systems architecture and produce network diagrams. 

You can start architecture mapping once your council has confirmed which critical systems are in scope for your self-assessment.

Find out what architecture mapping involves

Submit your CAF progress to MHCLG

We want to understand cyber security risks and issues within the sector, so we can consider how to further support councils to address those risks. 

This guidance explains how to submit your CAF progress to MHCLG to help us to achieve this.

Find out how to submit your progress to MHCLG

What a good self-assessment looks like

Making sure your self-assessment is as accurate as possible and supported by evidence is an important part of the CAF.

In this guidance, find out what assurers look for in a self-assessment and how to complete a good assessment.

Find out what a good self-assessment looks like

Gather evidence for your self-assessment

Providing good evidence will help your assurer to understand your council’s cyber security posture and reduce the need for clarification. 

In this guidance, get tips on how to gather evidence that shows how your council is meeting the contributing outcomes.

Find out how to gather evidence for your self-assessment

We recently updated the Roles and Responsibilities page to help CAF teams select the right individual for the role of Approver, including what is expected of them and how many hours they may need to commit.

We’re keen to hear about your experience using the guidance on Security.gov.uk so we can continue to improve it. The feedback form takes approximately 5 minutes to complete and can be submitted anonymously.

Over the past few months, the Local Digital team has been actively engaging with the sector to raise awareness of the CAF for local government and encourage uptake from councils.

We've presented at key events including:

• UKA Live: Harnessing CAF to build cyber resilience

• ISFL Annual Conference 2025

• Solace, LGA, MHCLG & DSIT Webinar: What is good Cyber Governance?

• CYBERUK 2025

• DIZ Digital Innovation Forum

The events have provided valuable opportunities to connect with council representatives, public sector IT professionals, and cyber security experts.

We've also continued engaging with the Warning Advice Reporting Points (WARPs) across the regions and presented at the iNetwork CAF Peer Support Group as well as presenting at various Socitm events regionally.

Coming up

We'll be at the following events and hope to see you there:

• LGA Annual Conference

• iNetwork CAF Peer Support Group