.png)
What Is The Cyber AB?
An accreditation body does not assess organizations itself. It accredits the organizations that do, and it holds them to a consistent standard. That separation is what allows a certification to mean the same thing regardless of which firm performed the assessment.
The Cyber AB serves that function for the SCR Conformity Assessment Program. It is an independent organization, separate from the SCF Council, and it is the same body that operates in the CMMC ecosystem.
Independent Of The Content
The SCF Council owns the control set, the body of knowledge and the assessment guides. The Cyber AB accredits the organizations that assess against them. Neither body grades its own work.
Consistency Across Assessors
Accreditation is what keeps one 3PAO's assessment comparable to another's, which is the whole basis for a customer or regulator trusting the result.
A Public Register
Accredited organizations are listed publicly in the marketplace, so an organization can verify that whoever it is about to engage actually holds the accreditation claimed.
What Does The Cyber AB Govern?
Together with the Cyber EF, The Cyber AB governs the organization-level roles in the SCR CAP Ecosystem. Individual certifications sit with SAICO, and the authoritative content sits with the SCF Council.
SCR 3PAO
SCR Third-Party Assessment Organizations: Independent assessment organizations accredited to conduct SCR CAP conformity assessments on behalf of organizations seeking certification.
SCR CAT
SCR Control Assurance Tools: Governance, Risk and Compliance platforms that specialize in integrating the SCF, so that compliance interpretation and risk management are operationalized inside the tools an organization already runs.
SCR ASP
SCR Authorized Solutions Providers: Cloud-based platforms and service providers, including CSPs, MSPs and MSSPs, that operate within the defined scope of the SCF and give organizations a structured environment for implementing it.
SCR RPO
SCR Registered Provider Organizations: Consulting and advisory organizations registered to provide SCF implementation, advisory, and assessment preparation services.
SCR OSA
SCR Organizations Seeking Assessment: The organization pursuing an SCF-based certification, whose security posture and controls implementation is being evaluated but which has not yet completed an SCR CAP conformity assessment.
SCR CO
SCR Certified Organizations: Organizations that have passed an SCR CAP conformity assessment and earned a certification, maintained through ongoing compliance effort and periodic reassessment.
Accreditation Is Not An Endorsement Of Fit
Accreditation confirms that an organization met the standard for its role. It does not mean a given firm or platform suits your size, sector or budget. Shortlist from the marketplace, then evaluate against your own requirements.
What Is The Cyber AB's Relationship To The SCF?
The SCF is free, open and written by practitioners. That is a strength for adoption and a weakness for assurance, because a framework that certifies its own adopters has an obvious conflict of interest.
Placing accreditation with The Cyber AB removes that conflict. The SCF Council cannot accredit an assessor, and The Cyber AB does not write the controls being assessed. An organization presenting an SCF-based certification to a customer or a regulator can point to that separation as the reason the result should be trusted.
The Cyber AB also brings existing infrastructure. It already operates as an accreditation body in the CMMC ecosystem, which means the SCR CAP did not have to build an accreditation function from nothing.
The Cyber EF
The Cyber Engagement Forum is the engagement arm of The Cyber AB, responsible for training, marketplace development, knowledge building and outreach across the CMMC and SCF communities. See the Cyber EF page
The Cyber Engagement Forum is the engagement arm of The Cyber AB, responsible for training, marketplace development, knowledge building and outreach across both the CMMC and the SCF. See the Cyber EF page.
Where Do I Find Accredited Organizations?
The Cyber AB runs the SCF Marketplace, where every accredited 3PAO, CAT, ASP, RPO and other ecosystem participant is listed. Organizations looking to engage a provider should verify accreditation there rather than relying on a claim made in a sales conversation.
Organizations that want to become accredited apply through The Cyber AB directly. The requirements and the application process are published on its website.
%20(white).png)