The Secure Controls Framework (SCF) Council, in close collaboration with The Cyber AB, is advancing a comprehensive and strategically sequenced release of organizational certification baselines throughout 2025. This initiative is designed to build strong, measurable competencies across critical cybersecurity domains and to harmonize assurance pathways across regulatory schemes, third-party assessment organizations (SCF 3PAOs), and global compliance frameworks.
The rollout reflects a deliberate effort to reinforce cross-framework alignment, operational maturity, and security assurance through a set of baseline certifications that are responsive to both domestic and international regulatory developments. Each release builds on a common controls foundation, supporting interoperability while strengthening the ability of organizations to demonstrate due diligence, resilience, and risk-informed decision-making in rapidly evolving threat and compliance environments.
The certification schedule has been structured to follow a logical and impactful progression from foundational cybersecurity controls to specialized compliance obligations, supply chain risk, and sector-specific mandates. This approach ensures that each new certification is introduced with continuity, supporting consistent implementation practices and reusable evidence models across audits and assessments.
This rollout represents a blueprint for building sustainable organizational cybersecurity practices through certifiable, standards-based benchmarks. By strategically layering foundational controls, secure development expectations, and sector-specific mandates, the SCF Council and The Cyber AB are creating a future-ready ecosystem of certifications that drive audit readiness, reduce redundant compliance efforts, and increase confidence in third-party risk assessments; resulting in certification.
As the cybersecurity landscape continues to grow in complexity, this coordinated rollout affirms the SCF Council’s commitment to delivering value-aligned, scalable, and globally relevant assurance solutions for current regulatory and risk management needs. More to come in 2026...