Secure Controls Framework

Published: Feb. 21, 2019, 1:37 a.m.

b'

Defense in Depth\\xa0is available at\\xa0CISOSeries.com.

Is the "free to use" Secure Controls Framework the one meta-framework to rule them all?

Check out this post and discussion for the basis of our conversation on this week\'s episode which is\\xa0co-hosted by me,\\xa0David Spark\\xa0(@dspark), the creator of\\xa0CISO Series\\xa0and\\xa0Allan Alford\\xa0(@AllanAlfordinTX), CISO at\\xa0Mitel.\\xa0Our guest is Tom Cornelius, founder and contributor of the Secure Controls Framework (SCF) (@scf_support).

Thanks to this week\\u2019s podcast sponsor, SpyCloud

SpyCloud
Learn more about how you can protect employees and customers from account takeover with SpyCloud.

On this episode of\\xa0Defense in Depth, you\\u2019ll learn:

  • Purpose of the Secure Controls Framework is to have a single framework to address multiple requirements. It\'s a meta framework that takes into consideration the controls of all other frameworks.
  • You only need to use the security controls that are important and relevant to you. For that reason, don\'t be daunted by the number of controls on SCF (currently 750).
  • You can have security without privacy, but you can\'t have privacy without security. Integrating privacy and security is critical to SCF.

'