MHCLG’s CAF for local government

Katie Owen, Cyber Assessment Framework Service Owner, MHCLG talks to UKA Live about the Cyber Assessment Framework (CAF) for local government

The entire public sector is under constant cyber-attack by ‘bad actors’ – from nation state to cyber criminal - and the National Cyber Security Centre works hard to produce advice and guidance to help organisations assess cyber resilience. Its Cyber Assessment Framework is regarded as the gold standard against which to measure - and improve - preparedness to repel such attackers.

But every sector has its own unique quirks, and the Ministry of Housing, Communities and Local Government (MHCLG) has worked with local government to create a bespoke local government version. Why is this important?

I asked Katie Owen, Cyber Assessment Framework Service Owner at MHCLG to tell me more:

• What is the scale of the risk to local government - and citizen data - today?
• What is LG-CAF? And why do we need it?
• How does it help enable digital transformation?
• Will it ever be mandatory for local gov?
• Will other parts of the public sector (eg DWP and the NHS) accept the CAF as ‘the standard’ in terms of assessments? Will there ever be ‘One CAF to rule them all?

Further info:

• www.localdigital.gov.uk/cyber/cyber-assessment-framework-for-local-government/
• mhclgdigital.blog.gov.uk/2025/01/29/norfolk-county-councils-experience-with-the-cyber-assessment-framework-for-local-government/
• www.localdigital.gov.uk/hear-from-maldon-district-council-on-their-experience-with-the-caf-for-local-government/
• www.localdigital.gov.uk/hart-district-councils-experience-with-the-caf-for-local-government/