SCF Marketplace
Are you a consultant who has experience tailoring, implementing and using the Secure Controls Framework (SCF)? We are building a "SCF...
top of page
Search
SCF Contibutor
- Nov 17, 2021
- 2 min
SCF 2021.3 - ESG Convergence
Cybersecurity & Privacy Implications For Environmental, Social & Governance (ESG) Environmental, Social & Governance (ESG) criteria are...
SCF Contibutor
- Nov 11, 2021
- 2 min
Non-Federal Organization (NFO) Controls - NIST SP 800-171 Appendix E
NIST SP 800-171 has several dozen requirements that are hidden in plain sight, but most people are unaware they exist. While it is not...
SCF Contibutor
- Mar 23, 2019
- 1 min
SCF Council
We strive to provide transparency about the SCF. On March 22, 2019, the maintenance of the SCF website was passed from Verutus, LLC, one...
SCF Contibutor
- Feb 21, 2019
- 1 min
Defense In Depth Podcast - SCF
The SCF was the topic in the most current version of the Defense In Depth podcast series by David Spark, the creator of CISO Series and...
SCF Contibutor
- Feb 6, 2019
- 4 min
Controls Alignment - A Proactive Defense
Most people do not regard their cybersecurity and privacy documentation as a proactive security measure. Documentation is oftentimes...
SCF Contibutor
- Nov 6, 2018
- 2 min
SCF Privacy Management Principles
In response to a perceived need, volunteers from the Secure Controls Framework (SCF) took up a project to help organizations better...
SCF Contibutor
- Sep 7, 2018
- 8 min
Security & Privacy by Design (S|P) Principles
The concept of building security and privacy into technology solutions both by default and by design is a basic expectation for...
SCF Contibutor
- Jul 18, 2018
- 1 min
Source for SCF-Based Procedures
A SCF sponsor (ComplianceForge) released a new product, the Cybersecurity Standardized Operating Procedures (CSOP) to address the age-old...
SCF Contibutor
- May 15, 2018
- 1 min
Lost In Translation: The Reality Gap Between the Board of Directors & Cybersecurity
For your reading pleasure, we are pleased to announce the first in the Secure Controls Framework White Paper Series that is focused on...
SCF Contibutor
- Mar 6, 2018
- 2 min
EU GDPR Compliance Criteria (EGCC)
By the time you pour yourself a cup of coffee and read through this article, you can have a pretty solid understanding of the criteria...
SCF Contibutor
- Feb 18, 2018
- 2 min
NIST 800-171 Is Not Just For DoD Contractors
NIST 800-171 isn’t just for Department of Defense (DoD) contractors. Representatives from the National Institute of Standards and...
SCF Contibutor
- Feb 18, 2018
- 3 min
Words Matter - Understanding Policies, Control Objectives, Standards, Guidelines & Procedures
Cybersecurity terminology is important. Cybersecurity, IT professionals and legal professionals routinely abuse the terms “policy” and...
SCF Contibutor
- Feb 16, 2018
- 2 min
Multi-Factor Authentication (MFA) for NIST 800-171 Compliance (#3.5.3)
A common question is about how to best implement Multi-Factor Authentication (MFA) as part of NIST 800-171 compliance (requirement #3.5.3...
We've put together an assortment of free educational resources to help you in your efforts to bring sound cybersecurity and privacy practices to your organization. Through our guest contributors, we will be adding content regularly, so please check back often!
News & Updates
bottom of page