78 new controls focused on AI governance, with STRM for the EU AI Act, EU Cyber Resilience Act and NERC CIP.
Measure
SCF 2025.1.1
SCF 2025.2
Change
Total Controls
1264
1342
Domains
33
33
Laws, Regulations & Frameworks
250
255
With Published STRM
71
80
78
What Changed In This Release
78 new controls, led by Artificial Intelligence & Autonomous Technologies (AAT, 47), including prohibited AI practices such as social scoring and emotion inference.
New GOV-18 Quality Management System (QMS) control.
9 renamed and 22 wordsmithed.
STRM added or updated for the EU AI Act, EU Cyber Resilience Act, ENISA NIS2 annex, NIST AI 100-1, NIST AI 600-1, NERC CIP (2024), NAIC MDL-668 and NIST 800-171 R3.
%20(white).png)
.png)