A de-duplication and regrouping release: most controls are renumbered, with legacy numbers built into the spreadsheet, and the SCF now maps to 270 laws, regulations and frameworks.
Measure
SCF 2026.2
SCF 2026.3
Change
Total Controls
1534
1591
Domains
34
34
Laws, Regulations & Frameworks
254
270
With Published STRM
250
268
80
What Changed In This Release
1,457 controls renumbered and 99 moved to a different domain, with current to legacy numbers in the download.
80 new controls; 185 renamed and 204 wordsmithed.
23 legacy controls merged into 22 existing controls.
Risks and threats now mapped to each control as Likely, Possible or Unlikely.
25 laws, regulations and frameworks added, including Germany C5 (2026), Singapore CCP CII (2026), four Reserve Bank of India directions and Texas TRAIGA; 6 retired or replaced by newer versions.
%20(white).png)
.png)