SCF National Cyber Parks - Risk Range (RSK)

The Secure Controls Framework (SCF) is focused on security, compliance & resilience capabilities. 

Security + Compliance + Resilience is a unified objective. With this multi-discipline approach to cybersecurity and data protection, it signals that an organization isn’t just protected, but also meets its compliance requirements and can quickly bounce back from incidents.

The SCF is a framework and technology-agnostic approach to cybersecurity and data protection controls that can be used to identify, implement and manage secure, compliant and resilient capabilities that covers an organization’s People, Processes, Technologies, Data and Facilities (PPTDF).

As part of the SCF's cybersecurity awareness initiative, we created a National Cyber Park for each SCF domain. Of the SCF's thirty-three (33) domains, this article focuses on the Risk Management (RSK) domain.

Risk Management (RSK)

RSK Domain Principle

Proactively identify, assess, prioritize and remediate risk through alignment with industry-recognized risk management principles to ensure risk decisions adhere to the organization's risk threshold. 

RSK Domain Intent

Organizations ensure that the business unit(s) that own the assets and / or processes involved are made aware of and understand all applicable cybersecurity & data privacy-related risks. The cybersecurity & data privacy teams advise and educate on risk management matters, while it is the business units and other key stakeholders that ultimately own the risk.

SCF National Cyber Parks

For fans of the SCF who want some free user awareness posters, you can access this master poster that has links to each of the SCF's National Cyber Parks.