CIS Controls v8.1 Mapping to NCSC CAF v3.2
Published on March 17, 2025
This document contains mappings of CIS Critical Security Controls® (CIS Controls®) v8.1 and CIS Safeguards to National Cyber Security Centre (NCSC) Cyber Assessment Framework (CAF) v3.2.


As of June 23, 2025, the MS-ISAC has introduced a fee-based membership. Any potential reference to no-cost MS-ISAC services no longer applies.