CAF Outcome A1.b: Roles and Responsibilities

From the UK NCSC's Cyber Assessment Framework (version 3.1):

Your organisation has established roles and responsibilities for the security of networks and information systems at all levels, with clear and well-understood channels for communicating and escalating risks.

Cyber Threat Graph Context

Explore how this control relates to the wider threat graph

NCSC CAF Mapped to NIST CSF

A1.b: Roles and Responsibilities to CSF mappings generated from UK Cabinet Office table.

Related ISA/IEC 62443 Controls

Clauses and controls from IEC 62443 (62443-2-1 and 62443-3-3) which are related to this CAF outcome, taken from mappings by Ofgem.

  • Establish the security organisation (4.3.2.3.2)
    ISA/IEC 62443-2-1:2009
  • Define and communicate specific roles and responsibilities (4.3.2.5.5)
    ISA/IEC 62443-2-1:2009
  • Authorize account access (4.3.3.5.3)
    ISA/IEC 62443-2-1:2009
  • Form a continuity team (4.3.2.5.4)
    ISA/IEC 62443-2-1:2009
  • Define the organisational responsibilities (4.3.2.3.3)
    ISA/IEC 62443-2-1:2009
  • Document and communicate security expectations and responsibilities (4.3.3.2.5)
    ISA/IEC 62443-2-1:2009

Related ISO 27001 Controls

Clauses and controls from ISO 27001 (2013) which are related to this CAF outcome, taken from mappings by Ofgem.

  • Information security roles and responsibilities (6.1.1)
    ISO 27001:2013
  • Responsibilities and procedures (16.1.1)
    ISO 27001:2013

Related SP800-53 Controls

Generated from NISTs SP800-53/CSF Crosswalk mappings.