SCFConnect will be a game changer for those who use the Secure Controls Framework (SCF):Cost-effective, SCF-based GRC platformSCF Conformity Assessment Program (CAP) will use the SCFConnect as the Single Source of Truth (SSOT) for performing conformity assessments.This video provides a quick overvie …

Cybersecurity terminology is important. Cybersecurity, IT professionals and legal professionals routinely abuse the terms “policy” and “standard” as if these words are synonymous. In reality, these terms have quite different implications and those differences should be kept in mind, since the use of …

In addition to cybersecurity and privacy controls, the Secure Controls Framework (SCF) contains a separate risk and threat catalog, which have mappings to applicable SCF controls. These risk and threat catalogs are also leveraged within the Security & Privacy Risk Management Model (SP-RMM) that …