Adds the Shared Assessments SIG mapping and refreshes the SCF principles around resiliency, based on Executive Order 14028 and NIST SP 800-160 vol 2.
Measure
SCF 2021.3
SCF 2022.1
Change
Total Controls
1006
1011
Domains
32
32
Laws, Regulations & Frameworks
161
173
With Published STRM
5
What Changed In This Release
Shared Assessments Standard Information Gathering (SIG) mapping, developed together with Shared Assessments.
All SCF principles reviewed and updated for resiliency.
5 new controls, including CLD-06.1 Customer Responsibility Matrix (CRM) and TDA-20.3 Software Escrow.
New mappings include ISO 27002:2022, NIST SP 800-171A, NIST SP 800-218, the Colorado Privacy Act, the NY SHIELD Act, TX-RAMP, Australia Prudential Standard CPS 234 and Singapore MAS TRM 2021.
%20(white).png)
.png)