UK CAF v4 gap analysis: what NCSC assessors check that self-assessment misses | Vulnox Blog