SCF 2026.2

Jul 8, 2026

Moderate

Adds the Quantum Security (QTS) domain, and every mapped law, regulation and framework now has published STRM, apart from NIST 800-53 Rev4 and SIG.

Measure

SCF 2026.1.1

SCF 2026.2

Change

Total Controls

1468

1534

Domains

Laws, Regulations & Frameworks

253

254

With Published STRM

185

250

What Changed In This Release

New QTS domain with 34 controls, bringing the SCF to 34 domains.
66 new controls in total, 10 renamed and 21 wordsmithed.
STRM published for every mapped law, regulation and framework except NIST 800-53 Rev4 (deprecated) and SIG (mapped by the Santa Fe Group).
Updated maturity criteria, possible solutions and compensating controls.