.png)
%20color%20with%20text.png)
What Is The SCR Assessment Guide?
The Secure, Compliant & Resilient Conformity Assessment Program (SCR CAP) assessment guide is the authoritative reference document that defines the assessment criteria for each available SCR CAP certification. They serve three primary audiences: Organizations Seeking Assessment (OSAs), Registered Provider Organizations (RPOs), and Third-Party Assessment Organizations (3PAOs).
The SCR CAP Assessment Guide covers an overview of the assessment criteria, standards for Third-Party Assessment, Attestation and Certifcation (3PAAC), the authoritative mappings used for performing conformity assessments, and a variety of useful and need-to-know information. One of the most key features the SCR CAP Assessment Guide provides is found within Annex 1 with the law, regulation and framework-specific assessment guides.
Each law, regulation & framework-specific assessment guide provides a comprehensive mapping of the certification-specific requirements to the corresponding SCF controls, including the specific Assessment Objectives (AOs) that a 3PAO assessor will evaluate. The guides define the Minimum Security Requirements (MSR) control set for each certification, the tailored subset of SCF controls that must be implemented and assessed.
Assessment Guides also specify the evidence types expected for each control (examine, interview, and test artifacts), the scoring methodology used to determine conformity, and the thresholds required for successful certification.
What Each Law, Regulation and Framework- Specifc Assessment Guide Contains
Control Mapping: Complete mapping of certification requirements to SCF controls and Assessment Objectives.
MSR Control Set: The specific Minimum Security Requirements controls applicable to the certification.
Evidence Requirements: Detailed specifications for examine, interview, and test evidence artifacts. Scoring
Methodology: How controls are evaluated and scored. Certification Thresholds: Pass/fail criteria and conformity designation requirements.
Certification Thresholds: Pass/fail criteria and conformity designation requirements.
SCR CAP Certification Assessment Guides
The following law, regulation and framework-specific assessment guides are available for download. Each guide corresponds to an available SCR CAP certification and provides the complete assessment criteria for that specific conformity designation.
SCR CAP Certification Assessment Guides Coming Soon
The following law, regulation & framework-specific assessment guides will be added to the SCR Assessment Guide in Q1 of 2027 for download.
How to Use the SCR Assessment Guides
Assessment Guides serve different purposes depending on your role in the SCR CAP ecosystem. Here is how each audience should use them to prepare for or conduct a successful conformity assessment.
OSA
Organizations Seeking Assessment
Use the Assessment Guide for your target certification to understand exactly which SCF controls are in scope, what evidence you need to prepare, and how your controls will be scored. The MSR control set defined in the guide becomes your implementation checklist. Start with the guide before engaging an RPO or 3PAO.
RPO
Registered Provider Organizations
RPOs use Assessment Guides to structure their advisory and preparation services. The control mappings and evidence requirements define the scope of work for client engagements. RPOs should ensure their clients’ implementations address every Assessment Objective before recommending readiness for a 3PAO assessment.
3PAO
Third-Party Assessment Organizations
3PAOs use Assessment Guides as the authoritative reference during conformity assessments. The guides define the examine, interview, and test procedures, the scoring methodology, and the certification thresholds. All assessment findings must be documented against the specific Assessment Objectives.
Assessment Guide Updates
SCR Assessment Guides are updated in alignment with changes to the underlying laws, regulations, and frameworks they cover. When a new version of a mapped authority is released, the corresponding Assessment Guide is updated to reflect revised control mappings and assessment criteria. Always verify you are using the current version before beginning an assessment.
%20(white).png)