SCRP 2026.1
A moderate update that standardizes terminology on "security, compliance and resilience", refreshes maturity model criteria, and expands the set of authoritative sources.
What changed in this release
- Wording updated from “cybersecurity & data protection” to standardize on “security, compliance and resilience” terminology throughout the documents.
- Updated maturity model criteria.
- Updated “possible solutions & considerations” criteria.
- Proposed compensating controls.
- Additional authoritative sources were added and several were removed.
- New and updated Set Theory Relationship Mapping (STRM) for multiple laws, regulations and frameworks.
- Changes to the SCRP are highlighted in green so updated content is easy to identify.
Releases older than 2024 (2023 and beyond) are not covered by this errata archive and are significantly out of date. Existing customers are encouraged to repurchase the current version at 50% of the original product price.
