SCRP + CSOP Combined Annual Update Subscription: Quarterly Releases
The SCRP + CSOP Combined Annual Update Subscription delivers quarterly releases of both the Security, Compliance and Resilience Program (SCRP) policies and standards and the matching Cybersecurity Standardized Operating Procedures (CSOP) SCRP Version. For organizations that own both products, this bundled subscription is the most cost-effective way to keep policies, standards, and procedures aligned release-to-release.
Because the CSOP procedures map 1-to-1 with SCRP policies and standards, the two products only deliver maximum value when they are kept in sync. The combined subscription synchronizes their release schedules and bundles both deliverables under a single 12-month subscription, removing the operational overhead of managing two separate subscriptions. The combined subscription rebranding to align with the SCRP is reflected in subscription updates starting with release 2026.1 in April 2026.
What Is The SCRP + CSOP Combined Subscription?
The SCRP + CSOP Combined Subscription is a 12-month update subscription service for existing clients that own both products. Both the SCRP and CSOP are updated on approximately a quarterly basis to reflect framework evolution and lessons learned from customer engagements. This subscription entitles the purchaser to 12 months of synchronized updates to both products, delivered together at each release.
Each release reflects updates to the underlying frameworks, new regulations and laws added to the SCRP and CSOP mappings, and improvements derived from real-world customer engagements. Because the CSOP procedures map 1-to-1 with SCRP policies and standards, the two products are designed to be updated together. The combined subscription guarantees that you receive the matching CSOP release with every SCRP release.
This is a subscription for existing clients who own both products. It is not a standalone purchase of the SCRP or CSOP. To purchase either product for the first time, see the SCRP and CSOP product pages. After initial purchase, renewing this combined subscription annually is the most cost-effective way to keep both documentation sets current and synchronized. Delivery is via email with secure ShareFile links, and each release includes errata documents for both products describing what changed.
No Software To Install
This subscription delivers updated editable Microsoft Office-based documentation templates on a quarterly cadence. Like the underlying products, there is no software to install, no agent to deploy, no account to provision, and no cloud environment to configure. If your organization can open and edit Microsoft Word or Excel files, you can use every quarterly release delivered under this subscription.
Microsoft Word and Excel
Every quarterly release delivers updated SCRP .docx and .xlsx files plus the matching CSOP .docx file. Compatible with Word 2016 and newer, Microsoft 365, OpenOffice, LibreOffice, and Google Docs and Sheets.
ShareFile Delivery
Each release is delivered as a secure ShareFile link via email containing both the SCRP and CSOP deliverables. Downloads include errata describing what changed in that release for each product.
Synchronized Cadence
Approximately four releases per year, synchronized so the SCRP policies and matching CSOP procedures arrive together, timed to reflect significant framework revisions and new regulations.
This delivery model is intentional. Each release arrives as editable Office documents that you can diff against your customized versions, review, and apply on your own schedule. There is no forced upgrade and no risk of a vendor SaaS breaking your documentation.
What Problems Does The Combined Subscription Solve?
Organizations that own both SCRP and CSOP but manage separate subscriptions face predictable challenges keeping policies and procedures in sync. The combined subscription is designed specifically to address these challenges.
Policy and Procedure Drift
If the SCRP is updated quarterly but the CSOP subscription lapses, your procedures will drift from your policies. The 1-to-1 mapping breaks down, creating audit gaps and operational confusion. The combined subscription guarantees both stay synchronized.
Administrative Overhead
Managing two separate subscriptions means two renewal cycles, two purchase orders, and two delivery streams to track. The combined subscription consolidates renewal, delivery, and management under a single subscription window.
Misaligned Release Application
When SCRP and CSOP releases arrive at different times, applying them in the correct order becomes a logistical exercise. The combined subscription delivers matching releases together, simplifying the update workflow.
Bundle Cost Efficiency
Two separate subscriptions cost more than a combined subscription. For organizations that own both products, the combined subscription is the most economical way to keep both current and aligned.
How Does The Combined Subscription Solve These Problems?
The combined subscription addresses each challenge above with synchronized quarterly releases structured for efficient update application across both products.
Synchronized Releases
SCRP and CSOP releases ship together at each quarterly release. Your policies, standards, and procedures stay in lockstep release-to-release without any manual coordination on your part.
Single Renewal Cycle
One subscription, one renewal date, one purchase order, one delivery stream. Reduces administrative effort across procurement, finance, and operations teams.
Paired Errata Documents
Each release ships with errata for both products. The errata identify every change and call out the matching SCRP-to-CSOP mapping updates, making it straightforward to apply changes consistently across both documents.
Combined Cost Savings
The combined subscription is priced below the cost of purchasing both individual subscriptions separately, recognizing that customers who own both products benefit most when both are kept current.
What Is Included With The Combined Subscription?
A SCRP + CSOP Combined Subscription purchase entitles the subscriber to 12 months of synchronized updates to both products from the purchase date. The subscription covers only the SCRP and CSOP; updates to other ComplianceForge products are governed by their own subscription agreements.
SCRP Quarterly Release Files
Updated Microsoft Word version of the SCRP per release, updated Microsoft Excel version of the SCRP mappings per release, all supporting annexes and templates refreshed, and consistent document structure release-to-release for stable customization.
CSOP Quarterly Release Files
Updated Microsoft Word version of the CSOP per release, aligned with the matching SCRP release so procedures map 1-to-1 with the current policies and standards. Same release structure and stable document outline as the SCRP.
Paired Release Errata
Each release ships with errata documents for both products listing every added, removed, and modified section, plus call-outs for matching SCRP-to-CSOP mapping updates and new regulations added. Enables surgical application of updates across both documents.
Delivery, Access, and Scope
Email notification with secure ShareFile link per release containing both products, single-entity license that applies to the subscriber organization, approximately four synchronized quarterly releases per year, and renewal is optional since the subscription does not auto-renew unless elected.
Applies Only To The Underlying Products
This subscription covers updates to the SCRP and CSOP only. If you also own other ComplianceForge products such as RMP, VPMP, IIRP, or others, those products are updated under their own individual product-update processes. The combined subscription does not extend to other products.
Quarterly Release Cadence
ComplianceForge targets approximately four releases per year for both the SCRP and CSOP, with their release schedules synchronized so they ship together. Releases are typically labeled by year and release number (for example, 2026.1, 2026.2, 2026.3, 2026.4). Timing is driven by significant framework events: major NIST revisions, new privacy laws, PCI DSS updates, and other regulatory changes.
Not every quarterly release contains large changes. Some releases are primarily incremental improvements and clarifications. Larger structural releases are less frequent but deliver significant value when they occur, typically coinciding with major framework revisions like NIST 800-53 baseline changes or PCI DSS major version updates. The synchronization between SCRP and CSOP releases is maintained even when only one product has substantive changes; the matching release ships with both products to preserve the 1-to-1 mapping.
Subscription Lifecycle
Each release flows from framework changes through paired ComplianceForge content updates for both SCRP and CSOP, paired errata documentation, and synchronized ShareFile delivery within 1-2 business days of publication. Subscribers can apply updates surgically across both documents using the paired errata as a guide.
How Updates Integrate With Your Customization
When you customized the SCRP and CSOP, you invested time tailoring policies, standards, and procedures to your organization, your roles, your cadences, and your tooling. Quarterly subscription releases are designed to preserve that customization effort while delivering framework currency across both documents.
Each quarterly release ships with detailed errata documents for both products that identify every change since the prior release, including added, removed, and modified sections, framework mapping updates, and new supporting templates. Because the SCRP and CSOP errata are paired, you can apply changes consistently across both documents in a single update cycle. ComplianceForge deliberately avoids structural overhauls between releases. Section numbering, control IDs, and document outlines remain stable release-to-release except when the underlying framework itself restructures. This keeps your customization effort portable across releases.
Professional Services
ComplianceForge offers optional professional services to customize purchased documentation. Professional services are not required to customize ComplianceForge documentation. However, some clients want our subject matter expertise to help customize their documentation to meet their specific business needs. If you have any questions about our professional services, please contact us at:
We offer the following professional service bundles:
5-Hour Bundle
This includes five (5) hours of professional services, which may be beneficial for companies that need some guidance on getting started with how to tailor their documentation.
10-Hour Bundle
This includes ten (10) hours of professional services, which may be beneficial for companies that need additional guidance on tailoring their documentation to meet their compliance requirements.
20-Hour Bundle
This includes twenty (20) hours of professional services, which may be beneficial for companies that need robust services, beyond just 10 hours, to assist in tailoring their documentation to meet their compliance requirements.
Purchased professional service hours expire 120 days (4 months) from the time of purchase if unused. Hours are intended to supplement, not replace, your own customization work, since only your organization knows the exact details to tailor your documentation. For questions regarding scoping a professional services engagement or configuring a custom package, contact ComplianceForge directly through the Contact Us page.
Why An Active Combined Subscription Matters
Cybersecurity documentation that drifts from the current framework version is a predictable source of audit findings, customer questionnaire issues, and regulatory exposure. When policies and procedures fall out of sync with each other, the problems compound: audit teams find inconsistencies between what is documented and what is performed. An active SCRP + CSOP Combined Subscription keeps both your policies and procedures aligned with the current framework landscape and with each other.
For most organizations, the combined subscription cost is dramatically lower than the internal effort required to research framework changes, rewrite both policies and procedures, and verify mapping accuracy quarterly. The combined subscription is the most cost-effective approach to documentation currency for organizations that own both the SCRP and the CSOP, especially those facing multiple compliance obligations or operating in regulated industries where audit readiness is continuously required.
Renewal Process
The SCRP + CSOP Combined Subscription is a 12-month subscription from the date of purchase. It does not auto-renew. Toward the end of your subscription window, ComplianceForge will notify you via email with the option to renew for another 12 months.
Renewal is optional. If you elect not to renew, you retain rights to all releases you received during the active subscription window. You simply stop receiving new releases from the date the subscription lapses. Re-subscribing later is always possible; you would resume receiving releases starting from whatever the current release is at the time of re-subscription. Both products are bundled under the single subscription renewal, so there is one renewal date to manage rather than two.