CAF 4.0 raises the bar for threat understanding. Public sector teams must shift from static risks to living, intelligence-led threat models that shape real security decisions.
The updated CAF 4.0 raises expectations around control A2.b - Understanding Threat.
Rather than focusing solely on awareness of common cyber-attacks, the framework now calls for a sector-specific, ...
Updated Nov 26, 2025
Version 1.0
AaronSingh
Microsoft
Microsoft
