RACF-CC Self-Assessment
A concise starting-point checklist across all eight domains.
Practical resource library
Useful guidance,
ready when you need it.
Explore the RACF-CC framework, implementation guides and current security analysis—written for organisations that need proportionate, achievable improvements.
Available nowRACF-CC Starter PathRACF-CC four-stage methodRACF-CC Safe Enforcement PatternRACF-CC Control Assurance modelRACF-CC Prioritisation Tool and worksheet8 RACF-CC domain guidesSupplier and third-party risk guideAnonymised worked case studyImplementation guidanceCurrent threat analysis
Start here
Build your RACF-CC pathway
Begin with one manageable improvement, understand the full framework, use its method and tools, then compare the approach with worked evidence.
Guided entry route
Starter Path
Define, look, choose, act and prove your way through one achievable RACF-CC improvement cycle.
Start here →Framework overviewRACF-CC
Understand the eight connected domains and the resource-aware principles behind them.
Explore the framework →Reusable processFour-Stage Method
Move from evidence and prioritisation to safe implementation and validated outcomes.
Explore the method →Interactive decision aidPrioritisation Tool
Compare likely risk reduction with effort, operational impact and cost.
Score a control →Worked evidenceAnonymised Case Study
See measurable control improvements—and why headline scores concealed some of the progress.
Read the case study →New: report control progress without a compliance badge. The Control Assurance model defines Not assessed through Sustained, explains evidence currency and keeps residual-risk decisions separate. Explore Control Assurance →
Implementation library
From principle to practice
RACF-CC cross-cutting guide
Manage supplier and third-party risk
Prioritise important dependencies, understand access and consequence, retain proportionate evidence and plan recovery or exit.
RACF-CC implementation patternEnforce controls safely
Move from observation and pilot to validated enforcement, monitoring and review without avoidable care disruption.
Identity SecurityPrepare for Microsoft Entra passkeys
Plan the transition from SMS and voice authentication without avoidable disruption.
Cloud AccessModernise SharePoint and OneDrive access
Move from domain-only syncing to carefully tested identity and device controls.
Endpoint SecurityManage Windows updates safely
Use deployment rings, monitoring and governed rollback to reduce operational risk.
Practical downloads
Tools, checklists and cheat sheets
Download verified RACF-CC resources now and see which practical tools are being developed next.
Available now: RACF-CC Control-Prioritisation Worksheet v1.4. Assess and document multiple controls using the four-tier First, Next, Develop and Review model. Download the Excel worksheet →
Having trouble with the download? Contact us →
Coming next
Incident Response Quick Sheet
Immediate actions, decision points and essential contact prompts.
Microsoft 365 Access Review
A practical review aid for accounts, roles, guests and authentication.
Backup Recovery Test Record
A simple evidence sheet for recording restore tests and lessons.
Voluntary support
Support Trends4You
Trends4You's practical guides, RACF-CC resources and downloadable tools are provided free of charge. If they've helped you or your organisation, you can support the time and hosting that keeps them freely available.
Support is entirely optional. Payment is handled on Stripe's secure site and does not provide additional access.
Need a clear starting point?
Begin with one defensible improvement.
The RACF-CC Starter Path guides you from a manageable scope and useful evidence to safe implementation and a validated outcome.