A metaframework is a “framework of frameworks” and is useful for organizations that need to adhere to multiple laws, regulations and frameworks. The Secure Controls Framework (SCF) is a metaframework and offers numerous benefits for your compliance efforts by providing a structured and integrated …

We are pleased to announce the 2023.2 release of the Secure Controls Framework (SCF). This release represents a minor update. While there are no new controls in this release, the Security & Privacy Capability Maturity Model (SP-CMM) was completely refreshed with new content and that represents a …

Cybersecurity terminology is important. Cybersecurity, IT professionals and legal professionals routinely abuse the terms “policy” and “standard” as if these words are synonymous. In reality, these terms have quite different implications and those differences should be kept in mind, since the use of …