SCF Council Partners With The Cyber AB On SCR CAP

The Secure Controls FrameworkCouncil, LLC (SCF Council), publisher of a leading cybersecurity metaframework,is pleased to announce the appointment of The Cyber AB as the exclusiveAccreditation Body (AB) for the Secure, Compliant & Resilient Conformity Assessment Program (SCR CAP). This new partnership marks a significant advancementto the Program and will enhance the global landscape of compliance andcertification within the cybersecurity industry.

The SCR CAP is focused onusing the Secure Controls Framework (SCF) as the control set to provide acompany-level certification. While the SCR CAP shares some similarities withother existing, single-focused certifications (e.g., ISO 27001, FedRAMP,etc.), the SCR CAP is unique in its metaframework approach to addressingcybersecurity and data protection requirements that span multiple laws,regulations, and conformity regimes. The SCR CAP is designed to utilizetailored cybersecurity and data protection controls that specifically addressthe applicable statutory, regulatory, and contractual obligations with which anorganization is required to comply.

The Cyber AB’s primary rolewill be to accredit the SCR Third-Party Assessment Organizations (SCR 3PAOs)and oversee the conflict-of-interest governance throughout the program.

Speaking about thepartnership, Tom Cornelius, founder of the SCF Council, said, “Thecollaboration between the SCF Council and The Cyber AB will change howcybersecurity certification is regarded, with SCR CAP offering a more efficient andtailored solution with the trust and confidence of an accredited third-partyassessment. By combining the content, process, and technology of the SCR CAPwith the capabilities and global reach of The Cyber AB, this partnership willraise the bar as to how third-party cybersecurity and data protectionassessments are performed.”

The SCR CAP leverages theprinciples of the Cybersecurity & Data Protection AssessmentStandards (CDPAS) to simplify andstandardize third-party assessments. The SCR CAP harnesses efficienciesprovided by the CDPAS and minimizes assumptions that exist with otherthird-party assessments. This results in the SCR CAP providing organizationswith a meaningful certification that accurately reflects its security posture,offering a streamlined way to demonstrate compliance to partners, clients andother stakeholders.

“Earning an ‘SCR Certified’credential will represent a significant accomplishment, rather than be viewedas a ‘participation ribbon’ that is of little practical value, nor indicativeof an organization’s true security posture,” Cornelius said. “Attaining an SCR certification by an accreditedthird-party will be a worthwhile endeavor for organizations as it raises thecredibility bar of their compliance.”

As the sole accreditation bodyfor SCR CAP, The Cyber AB will operate independently, providing oversight ofthe program’s accreditation and assessment processes.

“We are honored to bedesignated as the accreditor for the SCF CAP” said Matthew Travis, Chief Executive Officer of TheCyber AB. “We believe embracing third-party validation of cybersecurity conformityis how organizations will choose to best manage digital risk for themselves andtheir business partners, and we are excited for the immense potential of SCF CAP.”

The accreditation program forSCR CAP is expected to be rolled out in the first half of 2025.

About the Secure ControlsFramework Council LLC (SCF Council)

The SCF Council publishes theSecure Controls Framework (SCF)under a Creative Commons licensing model, which is available to organizationsfree of charge. The SCF serves as a “framework of frameworks,” simplifying andunifying cybersecurity and data protection controls. It provides a scalablemethod for organizations to address both their compliance obligations andsecurity needs, helping them operationalize cybersecurity, risk management andthird-party governance.

The SCF Council is dedicatedto simplifying the complex landscape of cybersecurity and data protectioncontrols. The SCF meta-framework integrates multiple standards into a holisticcontrol set, allowing organizations to operationalize cybersecurity and managerisk with a straightforward approach.

About the Cyber AB

Founded in 2020, The Cyber AB is a Maryland-based, independent, nonprofit 501(c)(3)tax-exempt organization that provides accreditation services for cybersecurityconformity regimes. The Cyber AB also serves as the exclusive accreditationbody for the U.S. Department of Defense Cybersecurity Maturity ModelCertification (CMMC) Program.

For more information about this collaboration and the SCR CAP, pleasevisit https://securecontrolsframework.com/scr-certified/organization-level-scr-certifications/scr-conformity-assessment-program-cap.