FOR CYBER ASSURANCE, GRC AND SECURITY TEAMS
Understand the evidence behind your cyber assurance.
SIFTR reviews supplied documents against the NCSC Cyber Assessment Framework (CAF), showing proposed mappings, supporting extracts and potential evidence gaps for professional review.
From documents to a reviewable evidence picture
Start with policies, risk registers and governance documents. SIFTR organises the evidence, proposes CAF mappings and surfaces supporting extracts.
SYNTHETIC EXAMPLE / HUMAN REVIEW REQUIRED
CAF A2.a — Policy and process
“The policy is reviewed annually by the Information Security Steering Group.”
Potential evidence gap: no evidence of review effectiveness was identified in the supplied material.
A potential evidence gap is a prompt to investigate, not proof that a control is absent.
Automation where it helps. Judgement where it matters.
Professionals review the engine’s findings and make final assessment decisions. SIFTR supports assurance; it does not certify compliance or perform network vulnerability scans.
Request a demonstration
Tell us about your evidence-review needs. We’ll discuss your requirements and arrange a suitable next step.