SCF 2022.3

Dec 13, 2022

Minor

Introduces the Evidence Request List (ERL), adds 33 controls and maps to ISO 27001:2022, CPRA and C2M2 v2.1.

Measure

SCF 2022.2.1

SCF 2022.3

Change

Total Controls

1057

1090

Domains

Laws, Regulations & Frameworks

183

189

With Published STRM

What Changed In This Release

New Evidence Request List (ERL) to standardize evidence artifact names.
33 new controls, including GOV-15 Operationalizing Cybersecurity & Privacy Practices and its sub-controls.
Terminology changes, such as "sensitive data" to "sensitive/regulated data".
New mappings include ISO 27001:2022, ISO 27017, C2M2 v2.1, CPRA, Japan ISMAP, NZISM 3.6, SIG 2023 and CMS MARS-E 2.0.
CCPA mapping replaced by CPRA.