Security Controls Framework (SCF)

[rslade]

Just came across https://www.securecontrolsframework.com/

Holy crow! That is enormous! 32 domains! 750 plus controls! Holistic! Compliance! (With absolutely everything!) A metaframework! The CIA triad expanded to the CIAS quadrants (adding Safety)!

I do rather like the fact that it is volunteer run. But I suspect that it is already too unwieldy to be a decent guide, and may become even more so. On the other hand, I've always said that, whatever you learn can be used in security, so ...

I suspect it would make a rather good study guide for those going for the CISSP exam. If you are familiar with all of this, you're ready.

[Until_then]

Safety - Safety addresses reducing risk associated with embedded technologies that could fail or be manipulated by nefarious actors.

^By that definition, that feature already falls under a security control family in NIST SP 800-53 (series).

[AppDefects]

Very cool!