SCF ASPs provide solutions to enable the implementation of SCF controls.
ASPs include, but are not limited to, cloud-based platforms (e.g., antimalware, FIM, etc.), Cloud Service Providers (CSPs), Managed Service Providers (MSPs), Managed Security Service Providers (MSSP), and other platform- or process-oriented service providers. ASPs operate within the defined scope of the SCF framework and provide a structured platform for implementing SCF principles. SCF Control Activity provided by ASPs are validated by the Cyber AB, or its designated assessors.
The CyberAB is the official Accreditation Body (AB) for the SCF's Conformity Assessment Program (SCF CAP). The CyberAB runs the SCF Marketplace. You can learn more about being an ASP and sign up through the CyberAB's website.
SCF ASPs are a key player in the broader SCF Ecosystem as depicted below: