Secure Controls Framework

Published: Feb. 21, 2019, 1:37 a.m.

Defense in Depth\xa0is available at\xa0CISOSeries.com.

Is the "free to use" Secure Controls Framework the one meta-framework to rule them all?

Check out this post and discussion for the basis of our conversation on this week's episode which is\xa0co-hosted by me,\xa0David Spark\xa0(@dspark), the creator of\xa0CISO Series\xa0and\xa0Allan Alford\xa0(@AllanAlfordinTX), CISO at\xa0Mitel.\xa0Our guest is Tom Cornelius, founder and contributor of the Secure Controls Framework (SCF) (@scf_support).

Thanks to this week\u2019s podcast sponsor, SpyCloud


Learn more about how you can protect employees and customers from account takeover with SpyCloud.

On this episode of\xa0Defense in Depth, you\u2019ll learn:

  • Purpose of the Secure Controls Framework is to have a single framework to address multiple requirements. It's a meta framework that takes into consideration the controls of all other frameworks.
  • You only need to use the security controls that are important and relevant to you. For that reason, don't be daunted by the number of controls on SCF (currently 750).
  • You can have security without privacy, but you can't have privacy without security. Integrating privacy and security is critical to SCF.