78 new controls, mostly AI agent governance, and seven new control sets, including the SCF CORE baselines.
Measure
SCF 2025.2.2
SCF 2025.3
Change
Total Controls
1342
1420
Domains
33
33
Laws, Regulations & Frameworks
255
258
With Published STRM
80
85
78
What Changed In This Release
78 new controls, led by Artificial Intelligence & Autonomous Technologies (AAT, 42), covering AI agents, prompt injection, kill switches and model resilience.
New governance controls for assurance levels and mergers, acquisitions & divestitures.
New control sets: Conformity Validation Cadence (CVC), SCF CORE Community Derived, CORE ESP Levels 1 to 3, CORE AI-Enabled Operations and CORE AI Model Deployment.
%20(white).png)
.png)