Control Scope
Tailor your assessments using a common control framework with unified controls mapped to 200+ compliance frameworks. Build your exact scope in minutes.
GRC Features for Compliance & Security Maturity
Ready to mature your cybersecurity program? Read about how SCF Connect can improve different areas of your program and browse the FAQs.
Replace spreadsheets and checklists with an intuitive and collaborative dashboard
Key Features
Optional Gap Assessment
Conduct a thorough gap assessment on the current state of your program.
Maturity Levels
Quantitatively see the maturity strength of your program, how it compares to your chosen controls and how to improve compliance.
Audits
Audit your cybersecurity program with ease by inviting Assessors to SCF Connect.
Subcontractors
Manage third-party risk management (TPRM) and supply chain risk with an intuitive vendor invitation and assessment system built into SCF Connect.
Statistical Reports
Take a by-the-numbers in-depth look at your program's maturity with statistical reports exactly the way you want them.
SCRMS Methodology
Go beyond compliance with the Security, Compliance & Resilience Management System — a GRC methodology that automatically identifies your compliance requirements and fills security program gaps with risk-driven controls.
ComplianceForge Content
Adopt or Override
Decide whether you prefer to enhance your Controls individually, or all at once with the Compliance Forge Content.
Free Updates
Receive free updates to the Policies, Standards, and Procedures, while your subscription is active.
Edit and Download
Customize the content according to your organization's needs and acquire downloadable DOC files that are editable.
ComplianceForge documentation bundles are available exclusively with yearly subscriptions.
Content Bundles
Basic - DSP Only
For organizations that need higher level documentation but want to write their own procedures.
- Policies
- Standards
- Control Objectives
- Guidelines
Enhanced - DSP + CSOP
For organizations that need all the documentation necessary to ensure the success of their infosec program.
- Everything in Basic
- Procedures
NIST SP 800-171
For organizations that need all the documentation necessary to ensure the success of their infosec program.
- Single Framework
- Specific to NIST SP 800-171 & CMMC Levels 1-2
NIST CSF 2.0
For organizations that only need to focus on NIST CSF 2.0.
- Single Framework
- Specific to NIST CSF 2.0
Become an SCF Practitioner for Free!
Advanced features unlock at $600/month for each of their clients.
Create Practitioner AccountFrequently Asked Questions
What is SCF Connect used for?
SCF Connect helps cybersecurity practitioners implement, operationalize, and report on their cybersecurity posture.
Who should use SCF Connect?
Cybersecurity and compliance managers, consultants, and assessors looking to simplify implementation and operation of the Secure Controls Framework.
What Frameworks and Standards does SCF Connect support?
SCF Connect provides access to all controls and mappings contained in the Secure Controls Framework including over 1000 controls and mapping to over 150 global statutory, regulatory, and industry frameworks.
What kind of reporting can I expect?
Reports contain detailed information on implementation status of controls as well as cybersecurity and compliance posture allowing you to focus on areas important to your business.
Can I invite my team to work with me?
Yes! Running a cybersecurity program often involves multiple stakeholders including co-workers, consultants, vendors, and assessors. You can easily invite stakeholders to collaborate via SCF Connect!
Would you like to learn more?
If you couldn't find an answer to your question, you can always send us a message. We will respond as soon as possible.
Contact Us