The CDPAS was developed by cybersecurity practitioners for cybersecurity practitioners. A free resource by the Secure Controls Framework Council, the CDPAS is a best-in-class approach to third-party cybersecurity assessments.
SHERIDAN, WY / ACCESSWIRE / November 25, 2024 / The Secure Controls Framework Council LLC (SCF Council), publisher of a leading cybersecurity metaframework, is pleased to announce the release of the Cybersecurity & Data Protection Assessment Standards (CDPAS). Following the CDPAS methodology enables cybersecurity and data privacy practitioners to improve the currently disjointed approach used to perform assessments of cybersecurity and/or data privacy controls. The CDPAS is not “one-size-fits-all,” since the practices are meant be adopted and tailored to the unique size, resources and risk circumstances of each organization. The CDPAS can be modified, or augmented, with organization-specific requirements. It was designed to provide performance standards for cybersecurity and data privacy related 3PAAC Services.
The CDPAS:
Is free to use and is meant to be tailored for an organization’s specific needs;
Is a cohesive, consistent set of standards to govern cybersecurity and data protection related Third Party Assessment, Attestation and Certification Services (3PAAC Services);
Empowers organizations to develop cybersecurity and data protection assessment strategies tailored to their specific mission and business needs, threats and operational environments.
Speaking about the CDPAS, Tom Cornelius, founder of the SCF Council, said, “The SCF took on an ambitious project to ‘build a better mousetrap’ to fix the common complaints associated with audits/assessments. The release of the CDPAS empowers organizations to develop cybersecurity and data protection assessment strategies tailored to their specific mission and business needs, threats and operational environments. By following this methodology, cybersecurity and data privacy practitioners can improve the currently disjointed approach used to perform assessments of cybersecurity and/or data privacy controls.”
The CDPAS forms the foundation for the SCF Conformity Assessment Program (SCF CAP) to simplify and standardize 3PAAC Services. The SCF CAP harnesses the efficiencies provided by the CDPAS and minimizes assumptions that exist with other third-party assessments. This approach is applicable to most cybersecurity and data privacy laws, regulations and frameworks. It offers organizations a streamlined way to demonstrate compliance to partners, clients and other stakeholders.
The SCF CAP is focused on using the Secure Controls Framework (SCF) as the control set to provide a company-level certification. While the SCF-CAP shares some similarities with other existing, single-focused certifications (e.g., ISO 27001, CMMC, FedRAMP, etc.), the SCF CAP is unique in its metaframework approach to covering cybersecurity and data protection requirements that span multiple laws, regulations and frameworks. The SCF CAP is designed to utilize tailored cybersecurity and data protection controls that specifically address the applicable statutory, regulatory and contractual obligations an organization is required to comply with.
About the Secure Controls Framework Council LLC (SCF Council)
The SCF Council publishes the SCF under a Creative Commons licensing model, which is available to organizations free of charge. The SCF serves as a “framework of frameworks,” simplifying and unifying cybersecurity and data privacy controls. It provides a scalable method for organizations to address both their compliance obligations and security needs, helping them operationalize cybersecurity, risk management and third-party governance.
The SCF Council is dedicated to simplifying the complex landscape of cybersecurity and data privacy controls. The SCF meta-framework integrates multiple standards into a holistic control set, allowing organizations to operationalize cybersecurity and manage risk with a straightforward approach.
Contact Information
SCF Council, LLC
[email protected]
SOURCE: Secure Controls Framework Council LLC
