Secure Controls Framework
Download The SCF
Start Here ▾
Content ▾
SCF CORE ▾
GRC Fundamentals ▾
SCR Initiative ▾
Marketplace ▾

SCF 2024.4

Dec 30, 2024
Minor

Adds STRM for the HIPAA Security Rule, CIS CSC 8.1 and CISA guidance.

Measure
SCF 2024.3
SCF 2024.4
Change
Total Controls
1239
1241
Domains
33
33
Laws, Regulations & Frameworks
252
250
With Published STRM
37
40
2
What Changed In This Release
  • STRM added for the HIPAA Security Rule (NIST SP 800-66 R2), HIPAA Administrative Simplification, CIS CSC 8.1, CISA Cybersecurity Performance Goals and the CISA Secure Software Development Attestation Form.
  • Older HIPAA, NIST 800-66 and CIS CSC 8.0 columns retired.
  • 2 new controls, 3 renamed and 9 wordsmithed.

Join 30,000+ GRC Professionals

Get the latest SCF updates, cybersecurity insights, and community news delivered to your inbox. You know you want to do it!

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

Controls are your security, compliance & resilience program - A control is the power to influence or direct behaviors and the course of events. The SCF is the Common Controls Framework®
‍

DOWNLOAD THE SCF

Start Here

What Is The SCF?Common Controls Framework (CCF)How To Implement (SCRMS)Domains & PrinciplesLaws & Frameworks (LRF)Relationship Mapping (STRM)NIST OLIR ParticipationESG Considerations

Free Content

SCF DownloadSecure, Compliant & Resilient Management System (SCRMS)SCRMS Prioritized Implementation
Guide (SCRMS PIG)Risk Management (SCR-RMM)Maturity Model (SCR-CMM)Assessment Standards (CDPAS)Mergers & Acquisitions (MA&D)Privacy Principles (DPMP)Evidence Request List (ERL)Unified Scoping Guide (USG)

Resources

GRC FundamentalsSCR InitiativeMarketplaceFAQAboutBlogErrataSwag - SCF Branded Gear

Support

Contact UsDonateVolunteer

Community

SCF DiscordSCF on GitHub

© 2026 Secure Controls Framework Council, LLC. All rights reserved.

Terms & ConditionsPrivacyCookiesSitemap