SCA Professional CommunityEcosystem Participants and Professions

Download Graphic

Steps to Join the SCA Ecosystem

  1. Determine Your Organization’s Role

    • Identify the specific role your organization seeks within the SCF ecosystem:
      • SCF Third-Party Assessment Organization (3PAO): Conducts assessments to validate compliance with SCF standards.
      • SCA Software Development Organization (SDO): Integrates SCA standards into an orgnization's software development lifecycle (SDLC) processes and practices.
  2. Application Submission

    • Complete the relevant application through The Cyber AB’s online platform.
    • Provide comprehensive organizational information, including:
      • Demographic Data: Location, size, and structure of your organization.
      • Firmographic Data: Industry, annual revenue, and operational scope.
      • Experiential Information: Key expertise, certifications, and past experience relevant to SCF roles.
      • Other Essential Business Data: Unique identifiers, operational history, and governance processes.
    • Your application also initiates an organizational background check to confirm your risk profile and readiness for ecosystem participation.
  3. Assessment and Authorization

    • For 3PAOs: Undergo a rigorous authorization and accreditation process overseen by The Cyber AB. This includes evaluations of technical capabilities, experience, and adherence to SCF standards.
    • For SDOs: Participate in a conformity assessment managed by The Cyber AB. Your software development program scope will be assessed to ensure alignment with SCA’s requirements.
  4. Agreement Execution

    • Sign agreements specifying your responsibilities, compliance with SCA standards, and adherence to the SCF Code of Professional Conduct. Additional attestations may be required based on your role.
  5. Training and Certification

    • Complete any mandatory training or certification prerequisites facilitated by SAICO, ensuring that your personnel and processes meet SCA standards.