- The SCF offers three individual certifications. SCF Practitioner, SCF Professional and SCF Assessor.
- The SCA offers two individual certifications. Certified SCA Practitioner (CSCAP) and Certified SCA Architect (CSCAA).
- SCF certifications are for cybersecurity and GRC professionals who evaluate and implement SCF controls.
- SCA certifications are for software developers and architects focused on Secure Software Development Practices (SSDP).
- All courses use Computer-Based Training (CBT). Learn at your own pace.
- Managed by the SCF Assessor and Instructor Certification Organization (SAICO).
Certification Programs
Two complementary certification programs serve different audiences. SCF for cybersecurity and GRC professionals, SCA for software developers and architects.
Secure Controls Framework
For cybersecurity and GRC professionals who use the SCF. These certifications equip professionals with the expertise to evaluate and implement SCF controls effectively, ensuring organizations meet regulatory and security best practices. Includes SCF Practitioner, SCF Professional and SCF Assessor levels.
Secure Code Alliance
For software developers and architects. Not project managers, security managers or IT directors. Focused purely on Secure Software Development Practices (SSDP) concepts that developers deal with daily, based on the SCA Body of Knowledge (SCA-BoK). Includes Certified SCA Practitioner (CSCAP) and Certified SCA Architect (CSCAA) levels.
Enabling you to learn at your own pace and make the most out of your professional development. Managed by the SCF Assessor and Instructor Certification Organization (SAICO).
What Certifications Does the Secure Controls Framework (SCF) Offer?
The Secure Controls Framework (SCF) offers three (3) individual-level certifications:
What Certifications Does the Secure Code Alliance (SCA) Offer?
The Secure Code Alliance (SCA) offers two (2) individual-level certifications:

.png)
.png)
.png)

