SEARCH
Download The SCF
SEARCH
Start Here
▾
Start Here
What Is The SCF?
Common Controls Framework (CCF)
SCRMS – How To Implement The SCF
SCF Domains & Principles
ESG Considerations
Included Laws, Regulations & Frameworks (LRF)
Set Theory Relationship Mapping (STRM)
NIST OLIR Participation
Content
▾
Free Content
Premium Content
SCF Download
Secure, Compliant & Resilient Management System (SCRMS)
SCRMS Prioritized Implementation Guide (SCRMS PIG)
Risk Management Model (SCR-RMM)
Capability Maturity Model (SCR-CMM)
Cybersecurity Assessment Standards (CDPAS)
Mergers, Acquisitions & Divestitures (MA&D)
Data Privacy Management Principles (DPMP)
Evidence Request List (ERL)
Unified Scoping Guide (USG)
Compensating Controls
Policies & Standards - SCRP
Procedures - CSOP
SCF CORE
▾
SCF CORE
SCF CORE Fundamentals
SCF CORE Modern Services Organizations (MSO)
SCF CORE MA&D
SCF CORE AI-Enabled Operations
SCF CORE AI Model Deployment
GRC Fundamentals
▾
GRC Fundamentals
GRC Basics
The Output of GRC Practices
Cybersecurity Materiality
Laws vs Regulations vs Frameworks
CMMC vs NIST 800-171 vs SCF
Emerging Trends
State Of The Industry
TPRM & SCRM
Integrity
Resilience
MSP / MSSP Dumpster Fire
Common Cybersecurity Laws
US (FED) - FedRamp
US (FED) - GLBA
US (FED) - HIPAA / HITECH
US (FED) - SOX
US (CA) - CCPA / CPRA
US (TX) - SB 2610
EU - DORA
EU - GDPR
EU - NIS2 Directive
Common Cybersecurity Frameworks
CIS Critical Security Controls (CSC)
ISO 27001 / ISO 27002
NIST CSF 2.0
NIST SP 800-53
NIST SP 800-161
NIST SP 800-171
NIST SP 800-172
PCI DSS
Trust Services Criteria (SOC 2)
Metaframework - HITRUST
Metaframework - Unified Compliance (UC)
Common Cybersecurity Regulations
US (FED) - CMMC
US (FED) - DFARS 252.204-70xx
US (NY) - NY DFS 23 NYCRR Part 500
Word Crimes
Policy vs Standard vs Procedure
Risks vs Threats
Strategy vs Operations vs Tactics
Inheritance vs Reciprocity
SCR Initiative
▾
SCR INITIATIVE
SCR Ecosystem
Cyber Engagement Forum (Cyber EF)
Cyber Accreditation Body (Cyber AB)
Organization-Level SCR Certifications
SCR Conformity Assessment Program (CAP)
SCR Assessment Guides
SCR Training & Individual-Level Certifications
SCR Practitioner
SCR Architect
SCR Assessor
Secure Code Alliance (SCA)
SCA Practitioner
SCA Architect
Secure Development Organization (SDO)
Certified Organization for Development Excellence (CODE)
Marketplace
▾
Marketplace
SCF Licensed Content Providers (LCPs)
Registered Provider Organizations (RPOs)
Control Assurance Tool (CAT)
Authorized Solution Provider (ASP)
Third-Party Assessment Organizations (3PAOs)
FAQ
About
Contact Us
Home
›
Errata
›
SCF 2024.1.1
SCF 2024.1.1
Apr 4, 2024
Maintenance
Corrects the AICPA TSC 2017 mapping, which was missing content in 2024.1.
Measure
SCF 2024.1
SCF 2024.1.1
Change
Total Controls
1229
1229
Domains
33
33
Laws, Regulations & Frameworks
243
243
With Published STRM
23
23
0
What Changed In This Release
Restored the missing Trust Services Criteria (TSC) 2017 mapping content.