Skip to content
Industrial Cybersecurity Partners
// WHICH CAF GAP FIRST?Prioritise CAF gaps by operational consequence.

Not every CAF gap deserves equal attention.

You have a list of CAF gaps and not enough time for all of them. Take one finding and see whether it deserves to go first.

  1. 01THREE DECISIONS
  2. 02A MODEL THAT CHANGES WITH EACH ANSWER
  3. 03CAF PRIORITY CARD TO KEEP · NO EMAIL NEEDED

You will not be asked for site names, network details or vulnerabilities. Your choices stay in this browser.

Prefer to talk first? Contact ICP

// WHAT THIS CHECK ASKS

  1. What does the finding mainly affect?

    • Architecture and assets
    • Protective controls
    • Monitoring and detection
    • Response and recovery
    • Not sure

  2. How strong is the evidence?

    • Established
    • Partial
    • Assumed
    • Unclear

  3. What is holding back prioritisation?

    • Operational consequence unclear
    • Dependencies
    • Ownership unclear
    • Nothing. Consequence is clear and material
    • Nothing. Consequence is clear but limited
    • Not sure

A provisional posture from three answers. It is not a formal CAF assessment, and there is no score.