SEARCH
Download The SCF
SEARCH
Start Here
▾
Start Here
What Is The SCF?
Common Controls Framework (CCF)
SCRMS – How To Implement The SCF
SCF Domains & Principles
ESG Considerations
Included Laws, Regulations & Frameworks (LRF)
Set Theory Relationship Mapping (STRM)
NIST OLIR Participation
Content
▾
Free Content
Premium Content
SCF Download
Secure, Compliant & Resilient Management System (SCRMS)
SCRMS Prioritized Implementation Guide (SCRMS PIG)
Risk Management Model (SCR-RMM)
Capability Maturity Model (SCR-CMM)
Cybersecurity Assessment Standards (CDPAS)
Mergers, Acquisitions & Divestitures (MA&D)
Data Privacy Management Principles (DPMP)
Evidence Request List (ERL)
Unified Scoping Guide (USG)
Compensating Controls
Policies & Standards - SCRP
Procedures - CSOP
SCF CORE
▾
SCF CORE
SCF CORE Fundamentals
SCF CORE Modern Services Organizations (MSO)
SCF CORE MA&D
SCF CORE AI-Enabled Operations
SCF CORE AI Model Deployment
GRC Fundamentals
▾
GRC Fundamentals
GRC Basics
The Output of GRC Practices
Cybersecurity Materiality
Laws vs Regulations vs Frameworks
CMMC vs NIST 800-171 vs SCF
Emerging Trends
State Of The Industry
TPRM & SCRM
Integrity
Resilience
MSP / MSSP Dumpster Fire
Common Cybersecurity Laws
US (FED) - FedRamp
US (FED) - GLBA
US (FED) - HIPAA / HITECH
US (FED) - SOX
US (CA) - CCPA / CPRA
US (TX) - SB 2610
EU - DORA
EU - GDPR
EU - NIS2 Directive
Common Cybersecurity Frameworks
CIS Critical Security Controls (CSC)
ISO 27001 / ISO 27002
NIST CSF 2.0
NIST SP 800-53
NIST SP 800-161
NIST SP 800-171
NIST SP 800-172
PCI DSS
Trust Services Criteria (SOC 2)
Metaframework - HITRUST
Metaframework - Unified Compliance (UC)
Common Cybersecurity Regulations
US (FED) - CMMC
US (FED) - DFARS 252.204-70xx
US (NY) - NY DFS 23 NYCRR Part 500
Word Crimes
Policy vs Standard vs Procedure
Risks vs Threats
Strategy vs Operations vs Tactics
Inheritance vs Reciprocity
SCR Initiative
▾
SCR INITIATIVE
SCR Ecosystem
Cyber Engagement Forum (Cyber EF)
Cyber Accreditation Body (Cyber AB)
Organization-Level SCR Certifications
SCR Conformity Assessment Program (CAP)
SCR Assessment Guides
SCR Training & Individual-Level Certifications
SCR Practitioner
SCR Architect
SCR Assessor
Secure Code Alliance (SCA)
SCA Practitioner
SCA Architect
Secure Development Organization (SDO)
Certified Organization for Development Excellence (CODE)
Marketplace
▾
Marketplace
SCF Licensed Content Providers (LCPs)
Registered Provider Organizations (RPOs)
Control Assurance Tool (CAT)
Authorized Solution Provider (ASP)
Third-Party Assessment Organizations (3PAOs)
FAQ
About
Contact Us
Home
›
Errata
›
SCF 2023.3.1
SCF 2023.3.1
Oct 2, 2023
Maintenance
Minor mapping corrections to the 2023.3 release.
Measure
SCF 2023.3
SCF 2023.3.1
Change
Total Controls
1168
1174
Domains
33
33
Laws, Regulations & Frameworks
229
229
With Published STRM
0
What Changed In This Release
Added NIS2 Article 21.2(i) to AST-01 and IAC-01.
Added CIS 8.0 safeguards to AST-01 and AST-02, and corrected a CIS typo on MON-02.
%20(white).png)
.png)