SEARCH
Download The SCF
SEARCH
Start Here
▾
Start Here
What Is The SCF?
Common Controls Framework (CCF)
SCRMS – How To Implement The SCF
SCF Domains & Principles
ESG Considerations
Included Laws, Regulations & Frameworks (LRF)
Set Theory Relationship Mapping (STRM)
NIST OLIR Participation
Content
▾
Free Content
Premium Content
SCF Download
Secure, Compliant & Resilient Management System (SCRMS)
SCRMS Prioritized Implementation Guide (SCRMS PIG)
Risk Management Model (SCR-RMM)
Capability Maturity Model (SCR-CMM)
Cybersecurity Assessment Standards (CDPAS)
Mergers, Acquisitions & Divestitures (MA&D)
Data Privacy Management Principles (DPMP)
Evidence Request List (ERL)
Unified Scoping Guide (USG)
Compensating Controls
Policies & Standards - SCRP
Procedures - CSOP
SCF CORE
▾
SCF CORE
SCF CORE Fundamentals
SCF CORE Modern Services Organizations (MSO)
SCF CORE MA&D
SCF CORE AI-Enabled Operations
SCF CORE AI Model Deployment
GRC Fundamentals
▾
GRC Fundamentals
GRC Basics
The Output of GRC Practices
Cybersecurity Materiality
Laws vs Regulations vs Frameworks
CMMC vs NIST 800-171 vs SCF
Emerging Trends
State Of The Industry
TPRM & SCRM
Integrity
Resilience
MSP / MSSP Dumpster Fire
Common Cybersecurity Laws
US (FED) - FedRamp
US (FED) - GLBA
US (FED) - HIPAA / HITECH
US (FED) - SOX
US (CA) - CCPA / CPRA
US (TX) - SB 2610
EU - DORA
EU - GDPR
EU - NIS2 Directive
Common Cybersecurity Frameworks
CIS Critical Security Controls (CSC)
ISO 27001 / ISO 27002
NIST CSF 2.0
NIST SP 800-53
NIST SP 800-161
NIST SP 800-171
NIST SP 800-172
PCI DSS
Trust Services Criteria (SOC 2)
Metaframework - HITRUST
Metaframework - Unified Compliance (UC)
Common Cybersecurity Regulations
US (FED) - CMMC
US (FED) - DFARS 252.204-70xx
US (NY) - NY DFS 23 NYCRR Part 500
Word Crimes
Policy vs Standard vs Procedure
Risks vs Threats
Strategy vs Operations vs Tactics
Inheritance vs Reciprocity
SCR Initiative
▾
SCR INITIATIVE
SCR Ecosystem
Cyber Engagement Forum (Cyber EF)
Cyber Accreditation Body (Cyber AB)
Organization-Level SCR Certifications
SCR Conformity Assessment Program (CAP)
SCR Assessment Guides
SCR Training & Individual-Level Certifications
SCR Practitioner
SCR Architect
SCR Assessor
Secure Code Alliance (SCA)
SCA Practitioner
SCA Architect
Secure Development Organization (SDO)
Certified Organization for Development Excellence (CODE)
Marketplace
▾
Marketplace
SCF Licensed Content Providers (LCPs)
Registered Provider Organizations (RPOs)
Control Assurance Tool (CAT)
Authorized Solution Provider (ASP)
Third-Party Assessment Organizations (3PAOs)
FAQ
About
Contact Us
Home
›
Errata
›
SCF 2019.3
SCF 2019.3
N/A
Maintenance
No content changes were found between the archived 2019.2 and 2019.3 spreadsheets.
Measure
SCF 2019.2
SCF 2019.3
Change
Total Controls
747
747
Domains
32
32
Laws, Regulations & Frameworks
With Published STRM
0
What Changed In This Release
The archived 2019.3 file matches 2019.2 cell for cell.