.png)
Three Organizations, One Initiative
The Cyber AB validates the control activity ASPs provide and lists them in the SCF Marketplace. The Cyber EF is extending certification requirements upstream to the vendor products organizations rely on, including AI.
%20(white).png)
The SCF Council writes the content. It owns the control set, the body of knowledge and the assessment guides, but it does not accredit assessors or issue certifications.
%20Ecosystem%20-%20SCR%20Ecosystem%202026%20draft1%20(1).png)
The Cyber AB is the Accreditation Body for the SCR CAP and the same body that operates in the CMMC ecosystem. It decides who is qualified to assess and support organizations, and it lists them in the SCF Marketplace.
The Cyber EF is an entity of The Cyber AB dedicated to sustained engagement with CMMC and SCF stakeholders through training, education, outreach and market facilitation.
Individual certifications sit with SAICO, the SCR Assessor and Instructor Certification Organization.
What Is an SCR ASP?
SCR ASPs provide solutions that enable the implementation of SCF controls. They include, but are not limited to, cloud-based platforms (for example antimalware and FIM), CSPs, MSPs, MSSPs and other platform- or process-oriented service providers. ASPs operate within the defined scope of the SCF and give organizations a structured platform for implementing it.
SCF control activity provided by ASPs is validated by The Cyber AB, or its designated assessors.
As requirements change, the controls an ASP runs for you keep working against the same SCF control set, instead of being re-mapped for each new mandate.
Cloud Platforms
Cloud-based platforms (e.g., antimalware, FIM) that implement SCF-aligned security controls.
MSPs & MSSPs
Managed Service Providers and Managed Security Service Providers offering SCF-aligned services.
Validated Solutions
All SCF Control Activity by ASPs is validated by The Cyber AB or designated assessors.
Validated by The Cyber AB
SCF Control Activity provided by Authorized Solution Providers is validated by The Cyber AB or its designated assessors, ensuring that ASP solutions genuinely enable SCF control implementation for Organizations Seeking Assessment.
The Cyber AB Marketplace
The Cyber AB is the official Accreditation Body (AB) for the Secure, Compliant & Resilient Conformity Assessment Program (SCR CAP). The Cyber AB runs the SCF Marketplace where all accredited ASPs and other ecosystem participants are listed.
Organizations looking for validated technology solutions or managed service providers that are accredited as SCR ASPs should visit The Cyber AB Marketplace to identify qualified providers. You can learn more about being an ASP and sign up through The Cyber AB’s website.
The Cyber AB SCF Marketplace
The Cyber AB is the official Accreditation Body for the SCR CAP. All accredited SCR ASPs are listed in The Cyber AB Marketplace. Visit cyberab.org to find an ASP or apply to become one.
SCR ASPs in the Broader Ecosystem
SCR ASPs are a key player in the broader SCF Ecosystem. ASPs provide the technology platforms and managed services that Organizations Seeking Assessment (OSAs) use to implement SCF controls and demonstrate conformance.
SCR CAP Ecosystem Participants
SCF Council (content), The Cyber AB (accreditation), the Cyber EF (engagement), 3PAO (assessment), RPO (preparation), ASP (solutions, you are here), CAT (GRC platforms), LCP (licensed content), OSA (the organization seeking assessment).
