Secure Controls Framework
Download The SCF
Start Here ▾
Content ▾
SCF CORE ▾
GRC Fundamentals ▾
SCR Initiative ▾
Marketplace ▾

SCF 2024.2

May 23, 2024
Moderate

Adds People, Process, Technology, Data and Facility (PPTDF) applicability tags and the SCF-M MSP/MSSP Secure Practices Baseline.

Measure
SCF 2024.1.1
SCF 2024.2
Change
Total Controls
1229
1234
Domains
33
33
Laws, Regulations & Frameworks
243
243
With Published STRM
23
27
5
What Changed In This Release
  • Every control tagged by PPTDF applicability.
  • New SCF-M baseline for supply chain risk assessments of MSPs and MSSPs.
  • 5 new controls, 10 renamed and 23 wordsmithed.
  • Final NIST 800-171 R3 and 800-171A R3 mappings, plus NY DFS 500 Amendment 2.

Join 30,000+ GRC Professionals

Get the latest SCF updates, cybersecurity insights, and community news delivered to your inbox. You know you want to do it!

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

Controls are your security, compliance & resilience program - A control is the power to influence or direct behaviors and the course of events. The SCF is the Common Controls Framework®
‍

DOWNLOAD THE SCF

Start Here

What Is The SCF?Common Controls Framework (CCF)How To Implement (SCRMS)Domains & PrinciplesLaws & Frameworks (LRF)Relationship Mapping (STRM)NIST OLIR ParticipationESG Considerations

Free Content

SCF DownloadSecure, Compliant & Resilient Management System (SCRMS)SCRMS Prioritized Implementation
Guide (SCRMS PIG)Risk Management (SCR-RMM)Maturity Model (SCR-CMM)Assessment Standards (CDPAS)Mergers & Acquisitions (MA&D)Privacy Principles (DPMP)Evidence Request List (ERL)Unified Scoping Guide (USG)

Resources

GRC FundamentalsSCR InitiativeMarketplaceFAQAboutBlogErrataSwag - SCF Branded Gear

Support

Contact UsDonateVolunteer

Community

SCF DiscordSCF on GitHub

© 2026 Secure Controls Framework Council, LLC. All rights reserved.

Terms & ConditionsPrivacyCookiesSitemap