CyConex helps UK public sector organisations prepare NCSC CAF assessments for GovAssure. It assesses against the target profile your competent authority or GovAssure programme requires and produces reviewer-ready outputs.
Evidence is gathered, mapped to contributing outcomes, and assessed with a full audit trail, so assurance leads can show how each conclusion was reached.
Still under development · Contact us to keep in touch
NCSC CAF is the primary framework — four objectives, fourteen principles, 41 contributing outcomes, and IGPs. CyConex also supports Cyber Essentials, NIST 800-53, NIST CSF 2.0, and custom control catalogues, with structured catalogues and reusable assessment context.
Yes. CyConex generates structured Excel and Word assessment exports, along with CAF heatmaps at objective and principle level — ready for GovAssure reviewers, competent authorities, and governance stakeholders.
CyConex is hosted in UK Azure regions. Customer evidence, assessment outputs, and platform metadata are stored and processed within the United Kingdom, supporting organisations with UK data residency requirements.