Cybersecurity Risk Assessment & the UK CAF v4.0 Framework

The UK NCSC released CAF v4.0, the most significant update since 2018, which retains the framework’s outcome-focused approach while adding emphasis on AI-related risks, stronger third-party/supply chain oversight, mature vulnerability management (including disclosure programs), and adversarial testing such as red teaming to improve organizational resilience; the document is informational and positions HackerOne services as supporting alignment with the new CAF guidance.