The SCF begins using Set Theory Relationship Mapping (STRM) per NIST IR 8477 and maps to NIST CSF 2.0, DORA, NIS2 and ISO 42001.
Measure
SCF 2023.4
SCF 2024.1
Change
Total Controls
1184
1229
Domains
33
33
Laws, Regulations & Frameworks
236
243
With Published STRM
23
45
What Changed In This Release
First release to use STRM to describe how controls relate to each law, regulation and framework.
45 new controls, led by Network Security (NET, 20); 9 wordsmithed.
New mappings include NIST CSF 2.0, NIST SP 800-207, the DoD Zero Trust Reference Architecture, DORA, NIS2, ISO 42001, the SEC Cybersecurity Rule, NY DFS 500 (2023) and CJIS 5.9.3.
%20(white).png)
.png)