What Is The Cyber EF?
An accreditation body has a narrow job. It sets a standard, evaluates organizations against it, and grants or withholds accreditation. It is deliberately not in the business of promoting the program or teaching people how to work within it, because those activities sit uncomfortably next to the act of judging.
The Cyber EF exists to do that second set of things. It is an entity of The Cyber AB whose stated mission is to support and promote the attainment of cybersecurity conformity through continuous engagement with industry and government. Its work covers both the CMMC and the SCF rather than only one.
Currently Being Restructured
The Cyber EF is new and its corporate structure is in the middle of changing. Treat any description of its legal form as provisional until The Cyber AB publishes the new arrangement.
What Does The Cyber EF Do?
The Cyber EF has described four areas of work. Each one addresses a gap that accreditation alone does not close.
Training & Development
Interactive training and professional development for the people implementing in the ecosystem, delivered both virtually and hands on. Accreditation says an organization is qualified. Training is how its people got there.
Marketplace Development
Building out the marketplace where accredited organizations are listed, including better filtering and international support, so that finding a qualified provider is a usable process rather than a long list.
Knowledge Building
Working with government, partners and industry experts to build and maintain the knowledge base that practitioners rely on between formal releases.
Recruitment
Promoting the case for cybersecurity conformity and bringing new members into the ecosystem, which matters because an assessment program with too few qualified assessors does not scale.
What Is The Cyber EF's Relationship To The SCF?
The Cyber EF engages the SCF ecosystem alongside the CMMC ecosystem rather than treating the SCF as a side concern. For an organization pursuing an SCF-based certification, that engagement is the practical route in: the training that produces qualified people, and the marketplace that makes accredited providers findable.
Where Individual Certification Sits
Individual certification sits with SAICO. See the SCR Ecosystem page for the current division of responsibility across the three governing bodies.
.png)
%20(white).png)