NCSC Cyber Asssessment Framework

Details
Content
Dependencies
Version History

This pack contains an incident type and relevant fields to initiate a self-assessment against the National Cyber Security Centre's Cyber Assessment Framework. All assessment questions are sent via e-mail and the responses also sent via e-mail. The assessments can also be answered within the Cortex XSOAR platform.

Automations

Name	Description
EntryWidgetNCSCResultsD	This script populates results for the dynamic content shown in the incident layout.
EntryWidgetNCSCResultsA	This script populates results for the dynamic content shown in the incident layout.
NCSCCalculateQuestionsScore	This script calculates the score based on the question and answer responses.
NCSCFieldProtection	This script protects the fields associated with the assessment from accidental modification.
NCSCQuestionPopulate	Populate a list named "NCSC CAF Assessment" with a list of the NCSC Questions.
NCSCReportOverview	This script generates the report details for the individual CAF Section. This automation runs using the default Limited User role, unless you explicitly change the permissions. For more information, see the section about permissions here: For Cortex XSOAR 6 see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.x/Cortex-XSOAR-Playbook-Design-Guide/Automations - For Cortex XSOAR 8 Cloud see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation/Create-a-script - For Cortex XSOAR 8.7 On-prem see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8.7/Cortex-XSOAR-On-prem-Documentation/Create-a-script
NCSCReportDetails_A	This script generates the report details for the individual CAF Section. This automation runs using the default Limited User role, unless you explicitly change the permissions. For more information, see the section about permissions here: For Cortex XSOAR 6 see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.x/Cortex-XSOAR-Playbook-Design-Guide/Automations - For Cortex XSOAR 8 Cloud see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation/Create-a-script - For Cortex XSOAR 8.7 On-prem see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8.7/Cortex-XSOAR-On-prem-Documentation/Create-a-script
EntryWidgetNCSCResultsC	This script populates results for the dynamic content shown in the incident layout.
NCSCReportDetails	This script generates the report details used in the final report. This automation runs using the default Limited User role, unless you explicitly change the permissions. For more information, see the section about permissions here: For Cortex XSOAR 6 see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.x/Cortex-XSOAR-Playbook-Design-Guide/Automations - For Cortex XSOAR 8 Cloud see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation/Create-a-script - For Cortex XSOAR 8.7 On-prem see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8.7/Cortex-XSOAR-On-prem-Documentation/Create-a-script
NCSCReportDetails_D	This script generates the report details for the individual CAF Section. This automation runs using the default Limited User role, unless you explicitly change the permissions. For more information, see the section about permissions here: For Cortex XSOAR 6 see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.x/Cortex-XSOAR-Playbook-Design-Guide/Automations - For Cortex XSOAR 8 Cloud see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation/Create-a-script - For Cortex XSOAR 8.7 On-prem see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8.7/Cortex-XSOAR-On-prem-Documentation/Create-a-script
NCSCReportDetails_B	This script generates the report details for the individual CAF Section. This automation runs using the default Limited User role, unless you explicitly change the permissions. For more information, see the section about permissions here: For Cortex XSOAR 6 see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.x/Cortex-XSOAR-Playbook-Design-Guide/Automations - For Cortex XSOAR 8 Cloud see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation/Create-a-script - For Cortex XSOAR 8.7 On-prem see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8.7/Cortex-XSOAR-On-prem-Documentation/Create-a-script
NCSCReportDetails_C	This script generates the report details for the individual CAF Section. This automation runs using the default Limited User role, unless you explicitly change the permissions. For more information, see the section about permissions here: For Cortex XSOAR 6 see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.x/Cortex-XSOAR-Playbook-Design-Guide/Automations - For Cortex XSOAR 8 Cloud see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation/Create-a-script - For Cortex XSOAR 8.7 On-prem see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8.7/Cortex-XSOAR-On-prem-Documentation/Create-a-script
EntryWidgetNCSCResultsB	This script populates results for the dynamic content shown in the incident layout.

Incident Fields

Name	Description
CAF A Status
CAF D Email	Enter the e-mail address of the person responsible for answering questions related to "Minimising the impact of cyber security incidents"
CAF A Achievement
CAF C Questions
CAF D Details
CAF D Achievement
CAF Overall Result
CAF A Result
CAF A Details
CAF D Questions
CAF B Result Raw
CAF C Achievement
CAF Regulator Email	The e-mail address of the regulator or assessor of this assessment
CAF B Result
CAF B Achievement
CAF D Answers
NCSC Assessment Status
CAF B Status
CAF D Result
CAF B Details
CAF B Answers
CAF B Questions
CAF A Result Raw
CAF C Details
CAF C Answers
CAF C Status
CAF C Email	Enter the e-mail address of the person responsible for answering questions related to "Detecting cyber security events"
CAF C Result Raw
CAF D Result Raw
CAF A Email	Enter the e-mail address of the person responsible for answering questions related to "Managing security risk"
CAF D Status
CAF A Questions
CAF C Result
CAF B Email	Enter the e-mail address of the person responsible for answering questions related to "Protecting against cyber-attack"
CAF A Answers

Incident Types

Name	Description
NCSC CAF Assessment

Layouts

Name	Description
NCSC CAF Assessment

Playbooks

Name	Description
NCSC CAF Assessment	This playbook executes automatically as part of the NCSC Assessment Incident Type. It will send the relevant questions (via e-mail) to each participant and generate the assessment results.

Report

Name	Description
NCSC Assessment	This if the final report generated when all CAF section questions are answered.

Automations

Name	Description
NCSCReportDetails	This script generates the report details used in the final report. This automation runs using the default Limited User role, unless you explicitly change the permissions. For more information, see the section about permissions here: For Cortex XSOAR 6 see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.x/Cortex-XSOAR-Playbook-Design-Guide/Automations - For Cortex XSOAR 8 Cloud see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation/Create-a-script - For Cortex XSOAR 8.7 On-prem see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8.7/Cortex-XSOAR-On-prem-Documentation/Create-a-script
NCSCQuestionPopulate	Populate a list named "NCSC CAF Assessment" with a list of the NCSC Questions.
EntryWidgetNCSCResultsC	This script populates results for the dynamic content shown in the incident layout.
EntryWidgetNCSCResultsB	This script populates results for the dynamic content shown in the incident layout.
NCSCReportDetails_A	This script generates the report details for the individual CAF Section. This automation runs using the default Limited User role, unless you explicitly change the permissions. For more information, see the section about permissions here: For Cortex XSOAR 6 see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.x/Cortex-XSOAR-Playbook-Design-Guide/Automations - For Cortex XSOAR 8 Cloud see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation/Create-a-script - For Cortex XSOAR 8.7 On-prem see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8.7/Cortex-XSOAR-On-prem-Documentation/Create-a-script
NCSCReportDetails_D	This script generates the report details for the individual CAF Section. This automation runs using the default Limited User role, unless you explicitly change the permissions. For more information, see the section about permissions here: For Cortex XSOAR 6 see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.x/Cortex-XSOAR-Playbook-Design-Guide/Automations - For Cortex XSOAR 8 Cloud see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation/Create-a-script - For Cortex XSOAR 8.7 On-prem see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8.7/Cortex-XSOAR-On-prem-Documentation/Create-a-script
NCSCReportDetails_C	This script generates the report details for the individual CAF Section. This automation runs using the default Limited User role, unless you explicitly change the permissions. For more information, see the section about permissions here: For Cortex XSOAR 6 see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.x/Cortex-XSOAR-Playbook-Design-Guide/Automations - For Cortex XSOAR 8 Cloud see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation/Create-a-script - For Cortex XSOAR 8.7 On-prem see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8.7/Cortex-XSOAR-On-prem-Documentation/Create-a-script
NCSCFieldProtection	This script protects the fields associated with the assessment from accidental modification.
NCSCCalculateQuestionsScore	This script calculates the score based on the question and answer responses.
EntryWidgetNCSCResultsD	This script populates results for the dynamic content shown in the incident layout.
EntryWidgetNCSCResultsA	This script populates results for the dynamic content shown in the incident layout.
NCSCReportOverview	This script generates the report details for the individual CAF Section. This automation runs using the default Limited User role, unless you explicitly change the permissions. For more information, see the section about permissions here: For Cortex XSOAR 6 see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.x/Cortex-XSOAR-Playbook-Design-Guide/Automations - For Cortex XSOAR 8 Cloud see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation/Create-a-script - For Cortex XSOAR 8.7 On-prem see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8.7/Cortex-XSOAR-On-prem-Documentation/Create-a-script
NCSCReportDetails_B	This script generates the report details for the individual CAF Section. This automation runs using the default Limited User role, unless you explicitly change the permissions. For more information, see the section about permissions here: For Cortex XSOAR 6 see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.x/Cortex-XSOAR-Playbook-Design-Guide/Automations - For Cortex XSOAR 8 Cloud see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation/Create-a-script - For Cortex XSOAR 8.7 On-prem see https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/8.7/Cortex-XSOAR-On-prem-Documentation/Create-a-script

Incident Fields

Name	Description
CAF A Result Raw
CAF D Questions
CAF A Questions
CAF A Details
CAF B Result Raw
CAF A Answers
CAF C Email	Enter the e-mail address of the person responsible for answering questions related to "Detecting cyber security events"
CAF B Achievement
CAF B Details
CAF C Achievement
CAF D Details
CAF A Status
CAF C Questions
CAF D Answers
CAF C Details
CAF A Achievement
CAF A Email	Enter the e-mail address of the person responsible for answering questions related to "Managing security risk"
CAF C Status
CAF C Result Raw
CAF D Result Raw
CAF D Email	Enter the e-mail address of the person responsible for answering questions related to "Minimising the impact of cyber security incidents"
CAF B Email	Enter the e-mail address of the person responsible for answering questions related to "Protecting against cyber-attack"
CAF D Result
CAF Regulator Email	The e-mail address of the regulator or assessor of this assessment
CAF B Result
CAF A Result
CAF B Status
CAF D Achievement
CAF C Result
CAF B Answers
CAF D Status
CAF B Questions
NCSC Assessment Status
CAF Overall Result
CAF C Answers

Incident Types

Name	Description
NCSC CAF Assessment

Playbooks

Name	Description
NCSC CAF Assessment	This playbook executes automatically as part of the NCSC Assessment Alert Type. It will send the relevant questions (via e-mail) to each participant and generate the assessment results.

Required Content Packs (2)

Pack Name	Pack By
Base	By: Cortex XSOAR
Common Scripts	By: Cortex XSOAR

Optional Content Packs (0)

Pack Name	Pack By

All level dependencies (4)

Pack Name	Pack By
Aggregated Scripts	By: Cortex XSOAR
Common Scripts	By: Cortex XSOAR
Cortex REST API	By: Cortex XSOAR
Base	By: Cortex XSOAR

1.1.13 - 7843807 (March 22, 2026)

Documentation and metadata improvements.

Related pull requests:
- 43568

Download

1.1.12 - 5636304 (October 29, 2025)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 41629

Download

1.1.11 - 4847835 (September 11, 2025)

Scripts

NCSCReportOverview

Updated the Docker image to: demisto/python3:3.12.8.3296088.

NCSCReportDetails_C

Updated the Docker image to: demisto/python3:3.12.8.3296088.

NCSCCalculateQuestionsScore

Updated the Docker image to: demisto/python3:3.12.8.3296088.

NCSCQuestionPopulate

Updated the Docker image to: demisto/python3:3.12.8.3296088.

EntryWidgetNCSCResultsB

Updated the Docker image to: demisto/python3:3.12.8.3296088.

NCSCReportDetails_B

Updated the Docker image to: demisto/python3:3.12.8.3296088.

EntryWidgetNCSCResultsD

Updated the Docker image to: demisto/python3:3.12.8.3296088.

NCSCReportDetails

Updated the Docker image to: demisto/python3:3.12.8.3296088.

EntryWidgetNCSCResultsC

Updated the Docker image to: demisto/python3:3.12.8.3296088.

NCSCReportDetails_A

Updated the Docker image to: demisto/python3:3.12.8.3296088.

NCSCReportDetails_D

Updated the Docker image to: demisto/python3:3.12.8.3296088.

NCSCFieldProtection

Updated the Docker image to: demisto/python3:3.12.8.3296088.

EntryWidgetNCSCResultsA

Updated the Docker image to: demisto/python3:3.12.8.3296088.

Related pull requests:
- 41193

Download

1.1.10 - R3474673 (May 20, 2025)

Scripts

NCSCReportDetails_A

Metadata and documentation improvements.

EntryWidgetNCSCResultsB

Metadata and documentation improvements.

EntryWidgetNCSCResultsC

Metadata and documentation improvements.

NCSCReportDetails_B

Metadata and documentation improvements.

NCSCCalculateQuestionsScore

Metadata and documentation improvements.

NCSCQuestionPopulate

Metadata and documentation improvements.

EntryWidgetNCSCResultsD

Metadata and documentation improvements.

NCSCReportDetails_D

Metadata and documentation improvements.

NCSCReportOverview

Metadata and documentation improvements.

NCSCReportDetails_C

Metadata and documentation improvements.

EntryWidgetNCSCResultsA

Metadata and documentation improvements.

NCSCReportDetails

Metadata and documentation improvements.

Related pull requests:
- 39143

Download

1.1.9 - R2989425 (March 26, 2025)

NCSC Cyber Asssessment Framework

Documentation and metadata improvements.

Related pull requests:
- 38999

Download

1.1.8 - 1935630 (January 6, 2025)

Scripts

EntryWidgetNCSCResultsA

Code functionality improvements.
Updated the Docker image to: demisto/python3:3.11.10.116949.

EntryWidgetNCSCResultsB

Code functionality improvements.
Updated the Docker image to: demisto/python3:3.11.10.116949.

EntryWidgetNCSCResultsC

Code functionality improvements.
Updated the Docker image to: demisto/python3:3.11.10.116949.

EntryWidgetNCSCResultsD

Code functionality improvements.
Updated the Docker image to: demisto/python3:3.11.10.116949.

Related pull requests:
- 37472

Download

1.1.7 - 1867101 (December 24, 2024)

Scripts

NCSCReportDetails_A

Documentation and metadata improvements.

NCSCReportOverview

Documentation and metadata improvements.

NCSCReportDetails_D

Documentation and metadata improvements.

NCSCReportDetails_C

Documentation and metadata improvements.

NCSCReportDetails

Documentation and metadata improvements.

NCSCReportDetails_B

Documentation and metadata improvements.

Related pull requests:
- 37687

Download

1.1.6 - 1809308 (December 15, 2024)

Scripts

NCSCReportDetails_D

Updated the Docker image to: demisto/python3:3.11.10.115186.

NCSCCalculateQuestionsScore

Updated the Docker image to: demisto/python3:3.11.10.115186.

EntryWidgetNCSCResultsC

Updated the Docker image to: demisto/python3:3.11.10.115186.

NCSCReportDetails_B

Updated the Docker image to: demisto/python3:3.11.10.115186.

NCSCQuestionPopulate

Updated the Docker image to: demisto/python3:3.11.10.115186.

EntryWidgetNCSCResultsB

Updated the Docker image to: demisto/python3:3.11.10.115186.

NCSCReportDetails

Updated the Docker image to: demisto/python3:3.11.10.115186.

NCSCReportDetails_C

Updated the Docker image to: demisto/python3:3.11.10.115186.

NCSCFieldProtection

Updated the Docker image to: demisto/python3:3.11.10.115186.

EntryWidgetNCSCResultsA

Updated the Docker image to: demisto/python3:3.11.10.115186.

EntryWidgetNCSCResultsD

Updated the Docker image to: demisto/python3:3.11.10.115186.

NCSCReportDetails_A

Updated the Docker image to: demisto/python3:3.11.10.115186.

NCSCReportOverview

Updated the Docker image to: demisto/python3:3.11.10.115186.

Related pull requests:
- 37567
- 37564
- 37565

Download

1.1.5 - 1162940 (July 9, 2024)

Scripts

EntryWidgetNCSCResultsA

Updated the Docker image to: demisto/python3:3.10.14.100715.

EntryWidgetNCSCResultsC

Updated the Docker image to: demisto/python3:3.10.14.100715.

EntryWidgetNCSCResultsB

Updated the Docker image to: demisto/python3:3.10.14.100715.

NCSCReportDetails

Updated the Docker image to: demisto/python3:3.10.14.100715.

EntryWidgetNCSCResultsD

Updated the Docker image to: demisto/python3:3.10.14.100715.

NCSCReportOverview

Updated the Docker image to: demisto/python3:3.10.14.100715.

NCSCCalculateQuestionsScore

Updated the Docker image to: demisto/python3:3.10.14.100715.

NCSCFieldProtection

Updated the Docker image to: demisto/python3:3.10.14.100715.

NCSCReportDetails_D

Updated the Docker image to: demisto/python3:3.10.14.100715.

NCSCReportDetails_B

Updated the Docker image to: demisto/python3:3.10.14.100715.

NCSCQuestionPopulate

Updated the Docker image to: demisto/python3:3.10.14.100715.

NCSCReportDetails_A

Updated the Docker image to: demisto/python3:3.10.14.100715.

NCSCReportDetails_C

Updated the Docker image to: demisto/python3:3.10.14.100715.

Related pull requests:
- 35310
- 35234
- 35242
- 35241
- 35240
- 35237
- 35244
- 35252
- 35236
- 35243
- 35245
- 35246
- 35247
- 35250
- 35248
- 35249
- 35235
- 35239
- 35238
- 35251

Download

1.1.4 - R5866730 (July 25, 2023)

Scripts

NCSCReportOverview

Updated the Docker image to: demisto/python3:3.10.10.48392.
Documentation and metadata improvements.

NCSCReportDetails_D

Updated the Docker image to: demisto/python3:3.10.10.48392.
Documentation and metadata improvements.

NCSCReportDetails_C

Updated the Docker image to: demisto/python3:3.10.10.48392.
Documentation and metadata improvements.

NCSCReportDetails

Updated the Docker image to: demisto/python3:3.10.10.48392.
Documentation and metadata improvements.

NCSCReportDetails_A

Updated the Docker image to: demisto/python3:3.10.10.48392.
Documentation and metadata improvements.

NCSCReportDetails_B

Updated the Docker image to: demisto/python3:3.10.10.48392.
Documentation and metadata improvements.

Related pull requests:
- 23716

Download

1.1.3 - R4718798 (March 1, 2023)

Layouts

NCSC CAF Assessment
This item is no longer supported in XSIAM.

Related pull requests:
- 24222

Download

1.1.2 - R4001473 (November 9, 2022)

Scripts

Multiple Scrips Changes:

Added reference to required permissions in automation's description and README.

NCSCReportOverview
NCSCReportDetails
NCSCReportDetails_A
NCSCReportDetails_B
NCSCReportDetails_C
NCSCReportDetails_D

Related pull requests:
- 15868

Download

1.1.1 - 1959372 (November 16, 2021)

Incident Fields

CAF D Status
- Maintenance and stability enhancements.
CAF D Achievement
- Maintenance and stability enhancements.
CAF C Achievement
- Maintenance and stability enhancements.
CAF B Status
- Maintenance and stability enhancements.
CAF A Status
- Maintenance and stability enhancements.
CAF C Status
- Maintenance and stability enhancements.
CAF A Achievement
- Maintenance and stability enhancements.
CAF Overall Result
- Maintenance and stability enhancements.
CAF B Achievement
- Maintenance and stability enhancements.

Download

1.1.0 - 1882648 (November 2, 2021)

Scripts

Breaking Change The following breaking change applies for organizations that implement pre-set roles on their incidents:
DBotRole has been removed from these automations. This change will affect any playbook that is dependent on, or runs, these automations.
These automations will now run using the default Limited User role, unless you explicitly change the permissions.
For more information, see the section about permissions here:
https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-2/cortex-xsoar-admin/playbooks/automations.html

##### NCSCReportDetails_A
##### NCSCReportDetails_B
##### NCSCReportOverview
##### NCSCReportDetails
##### NCSCReportDetails_D
##### NCSCReportDetails_C

Download

1.0.3 - 7772209 (September 25, 2021)

Scripts

EntryWidgetNCSCResultsA

Updated the Docker image to: demisto/python3:3.9.7.24076.

EntryWidgetNCSCResultsB

Updated the Docker image to: demisto/python3:3.9.7.24076.

EntryWidgetNCSCResultsC

Updated the Docker image to: demisto/python3:3.9.7.24076.

EntryWidgetNCSCResultsD

Updated the Docker image to: demisto/python3:3.9.7.24076.

NCSCCalculateQuestionsScore

Updated the Docker image to: demisto/python3:3.9.7.24076.

NCSCFieldProtection

Updated the Docker image to: demisto/python3:3.9.7.24076.

NCSCQuestionPopulate

Updated the Docker image to: demisto/python3:3.9.7.24076.

NCSCReportDetails

Updated the Docker image to: demisto/python3:3.9.7.24076.

NCSCReportDetails_A

Updated the Docker image to: demisto/python3:3.9.7.24076.

NCSCReportDetails_B

Updated the Docker image to: demisto/python3:3.9.7.24076.

NCSCReportDetails_C

Updated the Docker image to: demisto/python3:3.9.7.24076.

NCSCReportDetails_D

Updated the Docker image to: demisto/python3:3.9.7.24076.

NCSCReportOverview

Updated the Docker image to: demisto/python3:3.9.7.24076.

Download

1.1.13 - 7850318 (March 23, 2026)

Documentation and metadata improvements.

Related pull requests:
- 43568

Download

1.1.12 - 5636304 (October 29, 2025)

Changes are not relevant for XSIAM marketplace.

Related pull requests:
- 41629

Download

1.1.11 - 4847835 (September 11, 2025)

Scripts

NCSCReportOverview

Updated the Docker image to: demisto/python3:3.12.8.3296088.

NCSCReportDetails_C

Updated the Docker image to: demisto/python3:3.12.8.3296088.

NCSCCalculateQuestionsScore

Updated the Docker image to: demisto/python3:3.12.8.3296088.

NCSCQuestionPopulate

Updated the Docker image to: demisto/python3:3.12.8.3296088.

EntryWidgetNCSCResultsB

Updated the Docker image to: demisto/python3:3.12.8.3296088.

NCSCReportDetails_B

Updated the Docker image to: demisto/python3:3.12.8.3296088.

EntryWidgetNCSCResultsD

Updated the Docker image to: demisto/python3:3.12.8.3296088.

NCSCReportDetails

Updated the Docker image to: demisto/python3:3.12.8.3296088.

EntryWidgetNCSCResultsC

Updated the Docker image to: demisto/python3:3.12.8.3296088.

NCSCReportDetails_A

Updated the Docker image to: demisto/python3:3.12.8.3296088.

NCSCReportDetails_D

Updated the Docker image to: demisto/python3:3.12.8.3296088.

NCSCFieldProtection

Updated the Docker image to: demisto/python3:3.12.8.3296088.

EntryWidgetNCSCResultsA

Updated the Docker image to: demisto/python3:3.12.8.3296088.

Related pull requests:
- 41193

Download

1.1.10 - R3474673 (May 20, 2025)

Scripts

NCSCReportDetails_A

Metadata and documentation improvements.

EntryWidgetNCSCResultsB

Metadata and documentation improvements.

EntryWidgetNCSCResultsC

Metadata and documentation improvements.

NCSCReportDetails_B

Metadata and documentation improvements.

NCSCCalculateQuestionsScore

Metadata and documentation improvements.

NCSCQuestionPopulate

Metadata and documentation improvements.

EntryWidgetNCSCResultsD

Metadata and documentation improvements.

NCSCReportDetails_D

Metadata and documentation improvements.

NCSCReportOverview

Metadata and documentation improvements.

NCSCReportDetails_C

Metadata and documentation improvements.

EntryWidgetNCSCResultsA

Metadata and documentation improvements.

NCSCReportDetails

Metadata and documentation improvements.

Related pull requests:
- 39143

Download

1.1.9 - R2989425 (March 26, 2025)

NCSC Cyber Asssessment Framework

Documentation and metadata improvements.

Related pull requests:
- 38999

Download

1.1.8 - 1935630 (January 6, 2025)

Scripts

EntryWidgetNCSCResultsA

Code functionality improvements.
Updated the Docker image to: demisto/python3:3.11.10.116949.

EntryWidgetNCSCResultsB

Code functionality improvements.
Updated the Docker image to: demisto/python3:3.11.10.116949.

EntryWidgetNCSCResultsC

Code functionality improvements.
Updated the Docker image to: demisto/python3:3.11.10.116949.

EntryWidgetNCSCResultsD

Code functionality improvements.
Updated the Docker image to: demisto/python3:3.11.10.116949.

Related pull requests:
- 37472

Download

1.1.7 - 1867101 (December 24, 2024)

Scripts

NCSCReportDetails_A

Documentation and metadata improvements.

NCSCReportOverview

Documentation and metadata improvements.

NCSCReportDetails_D

Documentation and metadata improvements.

NCSCReportDetails_C

Documentation and metadata improvements.

NCSCReportDetails

Documentation and metadata improvements.

NCSCReportDetails_B

Documentation and metadata improvements.

Related pull requests:
- 37687

Download

1.1.6 - 1809308 (December 15, 2024)

Scripts

NCSCReportDetails_D

Updated the Docker image to: demisto/python3:3.11.10.115186.

NCSCCalculateQuestionsScore

Updated the Docker image to: demisto/python3:3.11.10.115186.

EntryWidgetNCSCResultsC

Updated the Docker image to: demisto/python3:3.11.10.115186.

NCSCReportDetails_B

Updated the Docker image to: demisto/python3:3.11.10.115186.

NCSCQuestionPopulate

Updated the Docker image to: demisto/python3:3.11.10.115186.

EntryWidgetNCSCResultsB

Updated the Docker image to: demisto/python3:3.11.10.115186.

NCSCReportDetails

Updated the Docker image to: demisto/python3:3.11.10.115186.

NCSCReportDetails_C

Updated the Docker image to: demisto/python3:3.11.10.115186.

NCSCFieldProtection

Updated the Docker image to: demisto/python3:3.11.10.115186.

EntryWidgetNCSCResultsA

Updated the Docker image to: demisto/python3:3.11.10.115186.

EntryWidgetNCSCResultsD

Updated the Docker image to: demisto/python3:3.11.10.115186.

NCSCReportDetails_A

Updated the Docker image to: demisto/python3:3.11.10.115186.

NCSCReportOverview

Updated the Docker image to: demisto/python3:3.11.10.115186.

Related pull requests:
- 37567
- 37564
- 37565

Download

1.1.5 - 1162940 (July 9, 2024)

Scripts

EntryWidgetNCSCResultsA

Updated the Docker image to: demisto/python3:3.10.14.100715.

EntryWidgetNCSCResultsC

Updated the Docker image to: demisto/python3:3.10.14.100715.

EntryWidgetNCSCResultsB

Updated the Docker image to: demisto/python3:3.10.14.100715.

NCSCReportDetails

Updated the Docker image to: demisto/python3:3.10.14.100715.

EntryWidgetNCSCResultsD

Updated the Docker image to: demisto/python3:3.10.14.100715.

NCSCReportOverview

Updated the Docker image to: demisto/python3:3.10.14.100715.

NCSCCalculateQuestionsScore

Updated the Docker image to: demisto/python3:3.10.14.100715.

NCSCFieldProtection

Updated the Docker image to: demisto/python3:3.10.14.100715.

NCSCReportDetails_D

Updated the Docker image to: demisto/python3:3.10.14.100715.

NCSCReportDetails_B

Updated the Docker image to: demisto/python3:3.10.14.100715.

NCSCQuestionPopulate

Updated the Docker image to: demisto/python3:3.10.14.100715.

NCSCReportDetails_A

Updated the Docker image to: demisto/python3:3.10.14.100715.

NCSCReportDetails_C

Updated the Docker image to: demisto/python3:3.10.14.100715.

Related pull requests:
- 35310
- 35234
- 35242
- 35241
- 35240
- 35237
- 35244
- 35252
- 35236
- 35243
- 35245
- 35246
- 35247
- 35250
- 35248
- 35249
- 35235
- 35239
- 35238
- 35251

Download

1.1.4 - R5866730 (July 25, 2023)

Scripts

NCSCReportOverview

Updated the Docker image to: demisto/python3:3.10.10.48392.
Documentation and metadata improvements.

NCSCReportDetails_D

Updated the Docker image to: demisto/python3:3.10.10.48392.
Documentation and metadata improvements.

NCSCReportDetails_C

Updated the Docker image to: demisto/python3:3.10.10.48392.
Documentation and metadata improvements.

NCSCReportDetails

Updated the Docker image to: demisto/python3:3.10.10.48392.
Documentation and metadata improvements.

NCSCReportDetails_A

Updated the Docker image to: demisto/python3:3.10.10.48392.
Documentation and metadata improvements.

NCSCReportDetails_B

Updated the Docker image to: demisto/python3:3.10.10.48392.
Documentation and metadata improvements.

Related pull requests:
- 23716

Download

1.1.3 - R4718798 (March 1, 2023)

Changes are not relevant for XSIAM marketplace.

Related pull requests:
- 24222

Download

1.1.2 - R4001473 (November 9, 2022)

Scripts

Multiple Scrips Changes:

Added reference to required permissions in automation's description and README.

NCSCReportOverview
NCSCReportDetails
NCSCReportDetails_A
NCSCReportDetails_B
NCSCReportDetails_C
NCSCReportDetails_D

Related pull requests:
- 15868

Download

1.1.1 - 1959372 (November 16, 2021)

Incident Fields

CAF D Status
- Maintenance and stability enhancements.
CAF D Achievement
- Maintenance and stability enhancements.
CAF C Achievement
- Maintenance and stability enhancements.
CAF B Status
- Maintenance and stability enhancements.
CAF A Status
- Maintenance and stability enhancements.
CAF C Status
- Maintenance and stability enhancements.
CAF A Achievement
- Maintenance and stability enhancements.
CAF Overall Result
- Maintenance and stability enhancements.
CAF B Achievement
- Maintenance and stability enhancements.

Download

1.1.0 - 1882648 (November 2, 2021)

Scripts

##### NCSCReportDetails_A
##### NCSCReportDetails_B
##### NCSCReportOverview
##### NCSCReportDetails
##### NCSCReportDetails_D
##### NCSCReportDetails_C

Download

1.0.3 - 7772209 (September 25, 2021)

Scripts

EntryWidgetNCSCResultsA

Updated the Docker image to: demisto/python3:3.9.7.24076.

EntryWidgetNCSCResultsB

Updated the Docker image to: demisto/python3:3.9.7.24076.

EntryWidgetNCSCResultsC

Updated the Docker image to: demisto/python3:3.9.7.24076.

EntryWidgetNCSCResultsD

Updated the Docker image to: demisto/python3:3.9.7.24076.

NCSCCalculateQuestionsScore

Updated the Docker image to: demisto/python3:3.9.7.24076.

NCSCFieldProtection

Updated the Docker image to: demisto/python3:3.9.7.24076.

NCSCQuestionPopulate

Updated the Docker image to: demisto/python3:3.9.7.24076.

NCSCReportDetails

Updated the Docker image to: demisto/python3:3.9.7.24076.

NCSCReportDetails_A

Updated the Docker image to: demisto/python3:3.9.7.24076.

NCSCReportDetails_B

Updated the Docker image to: demisto/python3:3.9.7.24076.

NCSCReportDetails_C

Updated the Docker image to: demisto/python3:3.9.7.24076.

NCSCReportDetails_D

Updated the Docker image to: demisto/python3:3.9.7.24076.

NCSCReportOverview

Updated the Docker image to: demisto/python3:3.9.7.24076.

Download

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

Supported By	Community
Created	January 27, 2021
Last Release	March 22, 2026

Compliance

DISCLAIMER

By downloading or using Marketplace content, you agree to the applicable Terms of Use and End User License Agreement. Third-party content is provided by its publisher, and Palo Alto Networks does not warrant, endorse, support, or assume responsibility for content not expressly identified as owned by Palo Alto Networks.