Updates to the CAF helps providers of essential services to better manage their cyber risks.