SCF ASPs provide solutions to enable the implementation of SCF controls. ASPs include cloud-based platforms, Cloud Service Providers (CSPs), Managed Service Providers (MSPs), Managed Security Service Providers (MSSPs), and other platform- or process-oriented service providers.
SCF ASPs provide solutions to enable the implementation of SCF controls.
ASPs include, but are not limited to, cloud-based platforms (e.g., antimalware, FIM, etc.), Cloud Service Providers (CSPs), Managed Service Providers (MSPs), Managed Security Service Providers (MSSPs), and other platform- or process-oriented service providers. ASPs operate within the defined scope of the SCF framework and provide a structured platform for implementing SCF principles.
SCF Control Activity provided by ASPs are validated by the CyberAB, or its designated assessors.
Cloud-based platforms (e.g., antimalware, FIM) that implement SCF-aligned security controls.
Managed Service Providers and Managed Security Service Providers offering SCF-aligned services.
All SCF Control Activity by ASPs is validated by the CyberAB or designated assessors.
Validated by the CyberAB
SCF Control Activity provided by Authorized Solution Providers is validated by the CyberAB or its designated assessors, ensuring that ASP solutions genuinely enable SCF control implementation for Organizations Seeking Assessment.
The CyberAB is the official Accreditation Body (AB) for the SCF’s Conformity Assessment Program (SCF CAP). The CyberAB runs the SCF Marketplace where all accredited ASPs and other ecosystem participants are listed.
Organizations looking for validated technology solutions or managed service providers that are accredited as SCF ASPs should visit the CyberAB Marketplace to identify qualified providers. You can learn more about being an ASP and sign up through the CyberAB’s website.
CyberAB SCF Marketplace
The CyberAB is the official Accreditation Body for the SCF CAP. All accredited SCF ASPs are listed in the CyberAB Marketplace. Visit cyberab.org to find an ASP or apply to become one.
SCF ASPs are a key player in the broader SCF Ecosystem. ASPs provide the technology platforms and managed services that Organizations Seeking Assessment (OSAs) use to implement SCF controls and demonstrate conformance.
SCF CAP Ecosystem Participants
SCF CAP Ecosystem Participants: SCF (Framework), CyberAB (Accreditation Body), 3PAO (Assessment Org), RPO (Provider Org), ACI (Control Integrator), ASP (Solution Provider, You Are Here), OSA (Org Seeking Assessment).
