Controls are your cybersecurity & data privacy program ---- A control is the power to influence or direct behaviors and the course of events.

Cybersecurity & Data Protection Assessment Standards

Cybersecurity & Data Protection Assessment Standards

Posted by SCF Council on Oct 21st 2024

We are pleased to announce the release of the Cybersecurity & Data Protection Assessment Standards (CDPAS)!This is a cohesive, consistent set of standards to govern cybersecurity and data protection related Third Party Assessment, Attestation and Certification Services (3PAAC Services). The C …
People, Processes, Technology, Data, and Facilities (PPTDF)

People, Processes, Technology, Data, and Facilities (PPTDF)

Posted by SCF Council on Jan 24th 2024

This is a somewhat contentious topic in the cybersecurity community. When you are discussing the scope of applicability for controls, is it: Limited to People, Processes & Technology (PPT)?Inclusive of data with People, Processes, Technology & Data (PPTD)? orComprehensive to include phys …
Metaframework Benefits For Your Compliance Efforts

Metaframework Benefits For Your Compliance Efforts

Posted by SCF Council on Jan 22nd 2024

A metaframework is a “framework of frameworks” and is useful for organizations that need to adhere to multiple laws, regulations and frameworks. The Secure Controls Framework (SCF) is a metaframework and offers numerous benefits for your compliance efforts by providing a structured and integrated …