Skip to content
CyConex Help

Browsing frameworks and controls

A framework is a published set of security controls, such as the NCSC Cyber Assessment Framework (CAF). CyConex holds a catalogue of frameworks, and each framework lists its controls.

Frameworks in the catalogue

Section titled “Frameworks in the catalogue”

The Controls page lists the frameworks CyConex supports, with their versions. Select a framework to see its controls in the Controls Catalog table. Each control has an ID, a title, and a summary.

Frameworks currently available include:

  • IASME Cyber Essentials
  • NCSC Cyber Assessment Framework (CAF), versions 3.2 and 4.0
  • NCSC Cloud Security Principles
  • NIST SP 800-53 Revision 5

Use a framework in a project

Section titled “Use a framework in a project”

Frameworks are added to a project when it’s set up. Once a project has a framework, its controls can be selected for assessments and used as the control focus for uploaded evidence.