GovAssure
GovAssure is the cyber security scheme for assessing government critical systems.
GovAssure is the cyber security scheme for assessing government critical systems against NCSC’s Cyber Assessment Framework (CAF). The process provides government organisations with visibility of cyber security risks, and support to understand and manage them more effectively.
GovAssure supports the aims of the Government Cyber Action Plan. It is designed for OFFICIAL government systems, including government sector critical national infrastructure (CNI).
The Government Cyber Security Policy Handbook supports government organisations to build capabilities which meet the requirements of the CAF.
Following the announcement of machinery of government changes, the Government Cyber Unit (GCU) and the broader digital functions of the Department for Science, Innovation and Technology (DSIT) have moved to the Department for Digital, Culture, Media and Sport (DCMS). We plan to continue with GovAssure on the previously announced timelines, and will communicate any updates to organisations as necessary.
GovAssure contents
Guidance
Read guidance to support your organisation through the GovAssure process.
WebCAF
Access your WebCAF stage 3 self-assessments, stage 4 reviews and stage 5 Targeted Improvement Plans (TIPs).
Documents and downloads
Download key GovAssure documents.
GovAssure news and updates
Read the latest GovAssure news.
Become an independent assurance reviewer
Information for companies interested in carrying out GovAssure Independent Assurance Reviews.
Government CAF profiles
See the Government CAF profiles (sign in required).
Cyber lexicon
A dictionary of terms and definitions related to cyber security and GovAssure.
Detailed contributing outcome summary guidance
Read guidance on how to write a summary for each contributing outcome in NCSC's Cyber Assessment Framework (CAF).
Keep in touch
The GovAssure team is part of the Government Cyber Unit (GCU) in DCMS. You can get in touch with the team at govassure@dsit.gov.uk.