SCF Cybersecurity Documentation Experts

SCF Cybersecurity Documentation Experts

SCF Council SCF Certification | SCF Licensed Content Provider | Secure Controls Framework (SCF)
December 26th, 2024 1 minute read

Listen to article
Audio generated by DropInBlog's Blog Voice AI™ may have slight pronunciation nuances. Learn more

ComplianceForge is very pleased to announce it is now a Secure Controls Framework Licensed Content Provider (SCF LCP). 

ComplianceForge's SCF-based policies, standards and procedures can save an organization a significant amount of money from the labor-related costs to research, write and refine cybersecurity documentation. The time and cost savings can be enormous:

  1. Decreased implementation costs (e.g., having to research and write policies, standards and procedures); and
  2. Increased speed of implementation and adoption, since you have have the documentation the same day you order it.

Learn more about ComplianceForge's SCF-based policies, standards and procedures at: https://complianceforge.com/secure-controls-framework-scf-compliance-bundles/

« Back to Blog

Related Articles

Third-Party Cybersecurity Assessment Standards

Third-Party Cybersecurity Assessment Standards

1 minute read

November 12th, 2024

scf licensed content provider

SCF Licensed Content Provider (LCP)

1 minute read

March 21st, 2025

CMMC: Document, Implement & Assess

CMMC: Document, Implement & Assess

6 minute read

January 9th, 2024

NIST SP 800‑53 R5 Control Families

This release includes a total of 1,189 controls, organized into 20 families:

  1. Access Control
  2. Awareness & Training
  3. Audit & Accountability
  4. Assessment, Authorization & Monitoring
  5. Configuration Management
  6. Contingency Planning
  7. Identification & Authentication
  8. Incident Response
  9. Maintenance
  10. Media Protection
  11. Physical & Environmental Protection
  12. Planning
  13. Program Management
  14. Personnel Security
  15. Personally Identifiable Information (PII) Processing & Transparency
  16. Risk Assessment
  17. System & Services Acquisition
  18. System & Communications Protection
  19. System & Information Integrity
  20. Supply Chain Risk Management

This count includes deprecated controls that have been removed or folded into others. Some controls are not categorized under baselines—low, moderate, high, or privacy—per NIST SP 800‑53B.

ComplianceForge provides full 1:1 mapping of all 20 families and their controls in its CDPP documentation.

!