.png)
Find SCF Expertise
The SCF Marketplace connects organizations seeking cybersecurity and data protection expertise with accredited SCF partners. The marketplace includes six categories of ecosystem participants, each with a distinct role in supporting the SCR Conformity Assessment Program (SCR CAP).
3PAO
SCR Third-Party Assessment Organizations
Accredited organizations that conduct independent conformity assessments of organizations against the SCR CAP. 3PAOs are the cornerstone of the SCR assessment ecosystem.
ASP
SCR Authorized Solutions Providers
Technology vendors and solution providers whose products and services are authorized to integrate with and support the SCF and the Secure, Compliant & Resilient Conformity Assessment Program.
RPO
SCR Registered Provider Organizations
Organizations that provide SCF-related professional services, including consulting and implementation. RPOs assist organizations in preparing for assessments and streamlining SCF adoption.
CAT
SCR Control Assurance Tools
Governance, Risk and Compliance platforms that have integrated the SCF, so one assessed control can satisfy obligations across many laws, regulations and frameworks.
LTP
SCR Licensed Training Providers
Organizations licensed by the SCF Council to deliver official SCF training programs, including preparation for the SAICO individual certification tracks.
LCP
SCF Licensed Content Providers
Organizations authorized by the SCF Council, LLC to sell derivative works of the SCF, such as SCF-based policies, standards, procedures, and other documentation solutions.
The Broader SCF Ecosystem
All marketplace participants are part of the broader SCF Ecosystem as depicted in the CAP Ecosystem diagram. Each role plays a distinct part in ensuring organizations can achieve and maintain SCF-based certification.
SCR CAP Ecosystem Participants
SCF (Framework), CYBER-AB (Accreditation Body), 3PAO (Assessment Org), RPO (Provider Org), LCP (Content Provider), ASP (Solution Provider), OSA (Org Seeking Assessment).
%20(white).png)