Compliance Frameworks Supported by SCF Connect

The Secure Controls Framework maps to 270+ statutory, regulatory, and industry frameworks. SCF Connect makes it easy to scope, assess, and report against any combination of them.

General & Industry Standards

SOC 2

SOC 2 (AICPA Trust Services Criteria)

NIST CSF 2.0

NIST Cybersecurity Framework (CSF) 2.0

PCI DSS

PCI DSS (Payment Card Industry Data Security Standard)

US Federal & Government

NIST 800-53

NIST SP 800-53

CMMC

Cybersecurity Maturity Model Certification (CMMC) 2.0

NIST 800-171

NIST SP 800-171

FedRAMP

Federal Risk and Authorization Management Program (FedRAMP)

StateRAMP

CJIS

FBI CJIS Security Policy

US Industry-Specific

HIPAA

HIPAA (Health Insurance Portability and Accountability Act)

FERPA

Family Educational Rights and Privacy Act (FERPA)

GLBA

Gramm-Leach-Bliley Act (GLBA)

NERC CIP

NERC CIP (Critical Infrastructure Protection)

International

ISO 27001

ISO/IEC 27001:2022

GDPR

EU General Data Protection Regulation (GDPR)

And 255+ More

The Secure Controls Framework maps to hundreds of additional frameworks including CIS Controls, COBIT, CSA CCM, CCPA, and many more. Browse all SCF controls to see the full mapping coverage.