topic Security Controls Framework (SCF) in Industry News

Security Controls Framework (SCF)

rslade — Mon, 09 Oct 2023 09:45:42 GMT

Just came across https://www.securecontrolsframework.com/

Holy crow! That is enormous! 32 domains! 750 plus controls! Holistic! Compliance! (With absolutely everything!) A metaframework! The CIA triad expanded to the CIAS quadrants (adding Safety)!

I do rather like the fact that it is volunteer run. But I suspect that it is already too unwieldy to be a decent guide, and may become even more so. On the other hand, I've always said that, whatever you learn can be used in security, so ...

I suspect it would make a rather good study guide for those going for the CISSP exam. If you are familiar with all of this, you're ready.

Re: Security Controls Framework (SCF)

Until_then — Sat, 09 Jan 2021 02:53:50 GMT

Safety - Safety addresses reducing risk associated with embedded technologies that could fail or be manipulated by nefarious actors.

^By that definition, that feature already falls under a security control family in NIST SP 800-53 (series).

Re: Security Controls Framework (SCF)

AppDefects — Sun, 10 Jan 2021 15:38:58 GMT

Very cool!