This if the final report generated when all CAF section questions are answered.
NCSC Cyber Asssessment Framework
- Details
- Content
- Dependencies
- Version History
This pack contains an incident type and relevant fields to initiate a self-assessment against the National Cyber Security Centre's Cyber Assessment Framework. All assessment questions are sent via e-mail and the responses also sent via e-mail. The assessments can also be answered within the Cortex XSOAR platform.
Name | Description |
---|---|
NCSC CAF Assessment |
Name | Description |
---|---|
NCSC Assessment |
Name | Description |
---|---|
CAF B Result | |
CAF A Result | |
CAF C Result Raw | |
CAF B Result Raw | |
CAF C Details | |
CAF A Answers | |
CAF A Details | |
CAF D Email | Enter the e-mail address of the person responsible for answering questions related to "Minimising the impact of cyber security incidents" |
CAF C Status | |
NCSC Assessment Status | |
CAF Regulator Email | The e-mail address of the regulator or assessor of this assessment |
CAF D Details | |
CAF A Questions | |
CAF D Status | |
CAF C Questions | |
CAF A Status | |
CAF Overall Result | |
CAF D Result | |
CAF D Achievement | |
CAF C Result | |
CAF B Email | Enter the e-mail address of the person responsible for answering questions related to "Protecting against cyber-attack" |
CAF B Questions | |
CAF B Status | |
CAF B Details | |
CAF D Result Raw | |
CAF A Achievement | |
CAF A Result Raw | |
CAF A Email | Enter the e-mail address of the person responsible for answering questions related to "Managing security risk" |
CAF C Email | Enter the e-mail address of the person responsible for answering questions related to "Detecting cyber security events" |
CAF C Answers | |
CAF D Answers | |
CAF B Achievement | |
CAF D Questions | |
CAF C Achievement | |
CAF B Answers |
Name | Description |
---|---|
EntryWidgetNCSCResultsB | This script populates results for the dynamic content shown in the incident layout. |
NCSCReportDetails_B | This script generates the report details for the individual CAF Section. This automation runs using the default Limited User role, unless you explicitly change the permissions. |
NCSCQuestionPopulate | Populate a list named "NCSC CAF Assessment" with a list of the NCSC Questions. |
NCSCReportDetails_A | This script generates the report details for the individual CAF Section. This automation runs using the default Limited User role, unless you explicitly change the permissions. |
EntryWidgetNCSCResultsD | This script populates results for the dynamic content shown in the incident layout. |
EntryWidgetNCSCResultsC | This script populates results for the dynamic content shown in the incident layout. |
NCSCReportDetails | This script generates the report details used in the final report. This automation runs using the default Limited User role, unless you explicitly change the permissions. |
NCSCReportOverview | This script generates the report details for the individual CAF Section. This automation runs using the default Limited User role, unless you explicitly change the permissions. |
NCSCCalculateQuestionsScore | This script calculates the score based on the question and answer responses. |
NCSCReportDetails_C | This script generates the report details for the individual CAF Section. This automation runs using the default Limited User role, unless you explicitly change the permissions. |
NCSCFieldProtection | This script protects the fields associated with the assessment from accidental modification. |
EntryWidgetNCSCResultsA | This script populates results for the dynamic content shown in the incident layout. |
NCSCReportDetails_D | This script generates the report details for the individual CAF Section. This automation runs using the default Limited User role, unless you explicitly change the permissions. |
Name | Description |
---|---|
NCSC CAF Assessment |
Name | Description |
---|---|
NCSC CAF Assessment | This playbook executes automatically as part of the NCSC Assessment Incident Type. It will send the relevant questions (via e-mail) to each participant and generate the assessment results. |
Name | Description |
---|---|
NCSC CAF Assessment |
Name | Description |
---|---|
CAF B Result | |
CAF A Result | |
CAF C Result Raw | |
CAF B Result Raw | |
CAF C Details | |
CAF A Answers | |
CAF A Details | |
CAF D Email | Enter the e-mail address of the person responsible for answering questions related to "Minimising the impact of cyber security incidents" |
CAF C Status | |
NCSC Assessment Status | |
CAF Regulator Email | The e-mail address of the regulator or assessor of this assessment |
CAF D Details | |
CAF A Questions | |
CAF D Status | |
CAF C Questions | |
CAF A Status | |
CAF Overall Result | |
CAF D Result | |
CAF D Achievement | |
CAF C Result | |
CAF B Email | Enter the e-mail address of the person responsible for answering questions related to "Protecting against cyber-attack" |
CAF B Questions | |
CAF B Status | |
CAF B Details | |
CAF D Result Raw | |
CAF A Achievement | |
CAF A Result Raw | |
CAF A Email | Enter the e-mail address of the person responsible for answering questions related to "Managing security risk" |
CAF C Email | Enter the e-mail address of the person responsible for answering questions related to "Detecting cyber security events" |
CAF C Answers | |
CAF D Answers | |
CAF B Achievement | |
CAF D Questions | |
CAF C Achievement | |
CAF B Answers |
Name | Description |
---|---|
EntryWidgetNCSCResultsB | This script populates results for the dynamic content shown in the incident layout. |
NCSCReportDetails_B | This script generates the report details for the individual CAF Section. This automation runs using the default Limited User role, unless you explicitly change the permissions. |
NCSCQuestionPopulate | Populate a list named "NCSC CAF Assessment" with a list of the NCSC Questions. |
NCSCReportDetails_A | This script generates the report details for the individual CAF Section. This automation runs using the default Limited User role, unless you explicitly change the permissions. |
EntryWidgetNCSCResultsD | This script populates results for the dynamic content shown in the incident layout. |
EntryWidgetNCSCResultsC | This script populates results for the dynamic content shown in the incident layout. |
NCSCReportDetails | This script generates the report details used in the final report. This automation runs using the default Limited User role, unless you explicitly change the permissions. |
NCSCReportOverview | This script generates the report details for the individual CAF Section. This automation runs using the default Limited User role, unless you explicitly change the permissions. |
NCSCCalculateQuestionsScore | This script calculates the score based on the question and answer responses. |
NCSCReportDetails_C | This script generates the report details for the individual CAF Section. This automation runs using the default Limited User role, unless you explicitly change the permissions. |
NCSCFieldProtection | This script protects the fields associated with the assessment from accidental modification. |
EntryWidgetNCSCResultsA | This script populates results for the dynamic content shown in the incident layout. |
NCSCReportDetails_D | This script generates the report details for the individual CAF Section. This automation runs using the default Limited User role, unless you explicitly change the permissions. |
Name | Description |
---|---|
NCSC CAF Assessment |
Name | Description |
---|---|
NCSC CAF Assessment | This playbook executes automatically as part of the NCSC Assessment Incident Type. It will send the relevant questions (via e-mail) to each participant and generate the assessment results. |
Pack Name | Pack By |
---|---|
Common Scripts | By: Cortex XSOAR |
Base | By: Cortex XSOAR |
Pack Name | Pack By |
---|
Incident Fields
- CAF D Status
- Maintenance and stability enhancements.
- CAF D Achievement
- Maintenance and stability enhancements.
- CAF C Achievement
- Maintenance and stability enhancements.
- CAF B Status
- Maintenance and stability enhancements.
- CAF A Status
- Maintenance and stability enhancements.
- CAF C Status
- Maintenance and stability enhancements.
- CAF A Achievement
- Maintenance and stability enhancements.
- CAF Overall Result
- Maintenance and stability enhancements.
- CAF B Achievement
- Maintenance and stability enhancements.
Scripts
Breaking Change The following breaking change applies for organizations that implement pre-set roles on their incidents:
DBotRole has been removed from these automations. This change will affect any playbook that is dependent on, or runs, these automations.
These automations will now run using the default Limited User role, unless you explicitly change the permissions.
For more information, see the section about permissions here:
https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-2/cortex-xsoar-admin/playbooks/automations.html
- ##### NCSCReportDetails_A
- ##### NCSCReportDetails_B
- ##### NCSCReportOverview
- ##### NCSCReportDetails
- ##### NCSCReportDetails_D
- ##### NCSCReportDetails_C
Scripts
EntryWidgetNCSCResultsA
- Updated the Docker image to: demisto/python3:3.9.7.24076.
EntryWidgetNCSCResultsB
- Updated the Docker image to: demisto/python3:3.9.7.24076.
EntryWidgetNCSCResultsC
- Updated the Docker image to: demisto/python3:3.9.7.24076.
EntryWidgetNCSCResultsD
- Updated the Docker image to: demisto/python3:3.9.7.24076.
NCSCCalculateQuestionsScore
- Updated the Docker image to: demisto/python3:3.9.7.24076.
NCSCFieldProtection
- Updated the Docker image to: demisto/python3:3.9.7.24076.
NCSCQuestionPopulate
- Updated the Docker image to: demisto/python3:3.9.7.24076.
NCSCReportDetails
- Updated the Docker image to: demisto/python3:3.9.7.24076.
NCSCReportDetails_A
- Updated the Docker image to: demisto/python3:3.9.7.24076.
NCSCReportDetails_B
- Updated the Docker image to: demisto/python3:3.9.7.24076.
NCSCReportDetails_C
- Updated the Docker image to: demisto/python3:3.9.7.24076.
NCSCReportDetails_D
- Updated the Docker image to: demisto/python3:3.9.7.24076.
NCSCReportOverview
- Updated the Docker image to: demisto/python3:3.9.7.24076.
Layouts
NCSC CAF Assessment
- Updated the script IDs in the layoutscontainer-NCSC_CAF_Assessment to the relevant script IDs.
PUBLISHER
Adam Burt
PLATFORMS
INFO
Supported By | Community | |
Created | January 27, 2021 | |
Last Release | November 9, 2022 |