A CAF assessment prepares an organisation to demonstrate cyber resilience against the NCSC Cyber Assessment Framework by gathering evidence, mapping it to the framework's outcomes, and closing gaps before a formal review. Preparation involves confirming your scope and essential functions, assembling outcome-based evidence, running a gap analysis against the 14 principles, and organising documentation so an assessor can trace every claim to proof.