.png)
What Is an SCR ASP?
SCR ASPs provide solutions to enable the implementation of SCF controls.
ASPs include, but are not limited to, cloud-based platforms (e.g., antimalware, FIM, etc.), Cloud Service Providers (CSPs), Managed Service Providers (MSPs), Managed Security Service Providers (MSSPs), and other platform- or process-oriented service providers. ASPs operate within the defined scope of the SCF framework and provide a structured platform for implementing SCF principles.
SCF Control Activity provided by ASPs are validated by The Cyber AB, or its designated assessors.
Cloud Platforms
Cloud-based platforms (e.g., antimalware, FIM) that implement SCF-aligned security controls.
MSPs & MSSPs
Managed Service Providers and Managed Security Service Providers offering SCF-aligned services.
Validated Solutions
All SCF Control Activity by ASPs is validated by The Cyber AB or designated assessors.
Validated by The Cyber AB
SCF Control Activity provided by Authorized Solution Providers is validated by The Cyber AB or its designated assessors, ensuring that ASP solutions genuinely enable SCF control implementation for Organizations Seeking Assessment.
The Cyber AB Marketplace
The Cyber AB is the official Accreditation Body (AB) for the Secure, Compliant & Resilient Conformity Assessment Program (SCR CAP). The Cyber AB runs the SCF Marketplace where all accredited ASPs and other ecosystem participants are listed.
Organizations looking for validated technology solutions or managed service providers that are accredited as SCR ASPs should visit The Cyber AB Marketplace to identify qualified providers. You can learn more about being an ASP and sign up through The Cyber AB’s website.
The Cyber AB SCF Marketplace
The Cyber AB is the official Accreditation Body for the SCR CAP. All accredited SCR ASPs are listed in The Cyber AB Marketplace. Visit cyberab.org to find an ASP or apply to become one.
SCR ASPs in the Broader Ecosystem
SCR ASPs are a key player in the broader SCF Ecosystem. ASPs provide the technology platforms and managed services that Organizations Seeking Assessment (OSAs) use to implement SCF controls and demonstrate conformance.
SCR CAP Ecosystem Participants
SCR CAP Ecosystem Participants: SCF (Framework), The Cyber AB (Accreditation Body), 3PAO (Assessment Org), RPO (Provider Org), CAT (Control Assurance Tool), ASP (Solution Provider, You Are Here), OSA (Org Seeking Assessment).
%20(white).png)