# Secure Controls Framework ## Capability Scope | **Control Domain** | Published in | **Capability Scope** | | ----------------------------------------------------------- | --------------------------------------------- | -------------------------------------------------------------------------------------------------------- | | Artificial and Autonomous Technology | SCF | | | Asset Management | SCF | [[Asset Management]] | | Business Continuity & Disaster Recovery | SCF | [[Backup and Recovery]] | | Capacity & Performance Planning | SCF | | | Change Management | SCF | [[Policy Automation]] | | Cloud Security | SCF | | | Compliance | SCF | [[Compliance]] | | Configuration Management | SCF | [[Policy Automation]] | | Continuous Monitoring | SCF | | | Cryptographic Protections | SCF | [[Identity and Access Management]] | | Cybersecurity & Data Privacy Governance | SCF | [[Data Management]] | | Data Classification & Handling | SCF | [[Data Management]] | | Data Privacy | SCF | [[Data Management]] | | Embedded Technology | SCF | | | Endpoint Security | SCF | [[Device Management]] | | Human Resources Security | SCF | | | Identification & Authentication | SCF | [[Identity and Access Management]] | | Incident Response | SCF | [[Incident Containment]] | | Information Assurance | SCF | | | Maintenance | SCF | | | Mobile Device Management | SCF | [[Device Management]] | | Network Security | SCF | [[Network Management]] | | Physical & Environmental Security | SCF | | | Project & Resource Management | SCF | | | Risk Management | SCF | | | Secure Engineering & Architecture | SCF | | | Security Awareness & Training | SCF | [[Training]] | | Security Operations | SCF | | | Technology Development & Acquisition | SCF | | | Third Party Management | SCF | [[Third Party Management]] | | Threat Management | SCF | [[Adversary Research]] | | Vulnerability & Patch Management | SCF | [[Control Verification]] | | Web Security | SCF | [[Application Management]]<br>[[Code Management]] | ## Inspiration & Resources + [Adobe Common Controls Framework | Adobe Trust Center](https://www.adobe.com/trust/compliance/adobe-ccf.html) + [Unified Compliance](https://www.unifiedcompliance.com/) + [Secure Controls Framework](https://securecontrolsframework.com/) + [Cisco Cloud Controls Framework - Cisco](https://www.cisco.com/c/en/us/about/trust-center/compliance/ccf.html) ## Release Notes + [[WIP - Q3 2024 Release#Map Common Controls Frameworks to Cybersecurity Capabilities]] ## [Cyber City Map](https://cybercitymap.com/) © 2023-2024 by [ThirdScore, Inc.](https://thirdscore.com/) All Rights Reserved.