Secure Controls Framework
Download The SCF

The Cyber EF

The Cyber Engagement Forum is an entity of The Cyber AB created for sustained engagement across the CMMC and SCF ecosystems. Where The Cyber AB accredits, the Cyber EF builds the surrounding capability: training, the marketplace, the knowledge base and outreach to the practitioners who have to use all of it.

Role Definition

What Is The Cyber EF?

An accreditation body has a narrow job. It sets a standard, evaluates organizations against it, and grants or withholds accreditation. It is deliberately not in the business of promoting the program or teaching people how to work within it, because those activities sit uncomfortably next to the act of judging.

The Cyber EF exists to do that second set of things. It is an entity of The Cyber AB whose stated mission is to support and promote the attainment of cybersecurity conformity through continuous engagement with industry and government. Its work covers both the CMMC and the SCF rather than only one.

Currently Being Restructured

The Cyber EF is new and its corporate structure is in the middle of changing. Treat any description of its legal form as provisional until The Cyber AB publishes the new arrangement.

Areas Of Focus

What Does The Cyber EF Do?

The Cyber EF has described four areas of work. Each one addresses a gap that accreditation alone does not close.

Training & Development

Interactive training and professional development for the people implementing in the ecosystem, delivered both virtually and hands on. Accreditation says an organization is qualified. Training is how its people got there.

Marketplace Development

Building out the marketplace where accredited organizations are listed, including better filtering and international support, so that finding a qualified provider is a usable process rather than a long list.

Knowledge Building

Working with government, partners and industry experts to build and maintain the knowledge base that practitioners rely on between formal releases.

Recruitment

Promoting the case for cybersecurity conformity and bringing new members into the ecosystem, which matters because an assessment program with too few qualified assessors does not scale.

Relationship To The SCF

What Is The Cyber EF's Relationship To The SCF?

The Cyber EF engages the SCF ecosystem alongside the CMMC ecosystem rather than treating the SCF as a side concern. For an organization pursuing an SCF-based certification, that engagement is the practical route in: the training that produces qualified people, and the marketplace that makes accredited providers findable.

Where Individual Certification Sits

Individual certification sits with SAICO. See the SCR Ecosystem page for the current division of responsibility across the three governing bodies.