Our most significant release since the Secure Controls Framework (SCF) went live in 2018!
We are pleased to announce the 2026 Q3 release of the SCF and it is the best yet! Over the past 8+ years, the SCF has expanded from a few dozen laws, regulations and frameworks to over 250. With that magnitude of growth, we felt it was time to reorganize control groupings and perform some de-duplication efforts to make the SCF as efficient and scalable as possible. You can download the latest release at: https://securecontrolsframework.com/free-content/scf-download
The reality is the only constant in life is change and even the SCF has to keep evolving as laws, regulations and frameworks are added to the landscape. The 34 domains are unchanged. However, most of the SCF's controls have been renumbered in this release but we have made this change as efficient as possible. To minimize disruption, current control # to legacy control # mappings are built directly into the SCF and detailed in the release.
Like risk management? Scroll all the way to the right on the SCF spreadsheet and you will find the risk and threat catalogs mapped to all 1,500+ SCF controls as Likely, Possible or Unlikely. It is a starting point for your own customization, built to make risk management discussions more efficient. You're welcome!
%20(white).png)
.png)