Secure Controls Framework
Download The SCF
Start Here ▾
Content ▾
SCF CORE ▾
GRC Fundamentals ▾
SCR Initiative ▾
Marketplace ▾

SCF 2025.2.2

Jul 22, 2025
Minor

Introduces the SCF CORE Fundamentals and MA&D baselines and corrects NZ HISF and CMMC Level 2 mappings.

Measure
SCF 2025.2.1
SCF 2025.2.2
Change
Total Controls
1342
1342
Domains
33
33
Laws, Regulations & Frameworks
255
255
With Published STRM
80
80
0
What Changed In This Release
  • New SCF CORE baselines: Fundamentals, and Mergers, Acquisitions & Divestitures (MA&D).
  • New Zealand HISF 2022 mapping corrected for 18 controls.
  • CMMC Level 2 mappings aligned with the NIST 800-171 R2 STRM.
  • UK GDPR mapping retired as redundant with the EU GDPR STRM.

Join 30,000+ GRC Professionals

Get the latest SCF updates, cybersecurity insights, and community news delivered to your inbox. You know you want to do it!

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

Controls are your security, compliance & resilience program - A control is the power to influence or direct behaviors and the course of events. The SCF is the Common Controls Framework®
‍

DOWNLOAD THE SCF

Start Here

What Is The SCF?Common Controls Framework (CCF)How To Implement (SCRMS)Domains & PrinciplesLaws & Frameworks (LRF)Relationship Mapping (STRM)NIST OLIR ParticipationESG Considerations

Free Content

SCF DownloadSecure, Compliant & Resilient Management System (SCRMS)SCRMS Prioritized Implementation
Guide (SCRMS PIG)Risk Management (SCR-RMM)Maturity Model (SCR-CMM)Assessment Standards (CDPAS)Mergers & Acquisitions (MA&D)Privacy Principles (DPMP)Evidence Request List (ERL)Unified Scoping Guide (USG)

Resources

GRC FundamentalsSCR InitiativeMarketplaceFAQAboutBlogErrataSwag - SCF Branded Gear

Support

Contact UsDonateVolunteer

Community

SCF DiscordSCF on GitHub

© 2026 Secure Controls Framework Council, LLC. All rights reserved.

Terms & ConditionsPrivacyCookiesSitemap