Secure Controls Framework (SCF)
May 30, 2022
Standards
Manage multiple regulatory compliance frameworks
and standards in one platform
Centraleyes enables cyber risk teams to easily create and define frameworks to fit their specific needs, or choose from tens of pre-populated integrated risk and compliance frameworks. By mapping shared controls across frameworks, Centraleyes allows for a quicker, automated compliance process.
- Cyber Assessment Framework (CAF) Version 4.0ย
- Greek NIS2 Self-Assessment Tool
- OWASP AIMA
- Centraleyes AI Framework (CAIF)
- CRI Profile
- EASA Part-IS Explained: Scope, Requirements and Dates
- IATA Cyber Regulations
- Essential Eight
- NIST CSF 2.0 Critical
- CJIS v5.9.5
- OT Cybersecurity Framework: Requirements & Implementation
- Centraleyes Privacy Framework (CPF)
- AI Governance
- ISO 42001
- NIST AI RMF
- DORA EU
- ESG Riskย
- Business Email Compromise
- Health Industry Cybersecurity Practices (HICP)
- NIST 7621
- Secure Controls Framework (SCF)
- Cyber Resilience Review (CRR)
- ISO 27002
- OWASP SAMM
- Insider Threat Mitigation
- Ransomware Readiness Assessment
- FINRA
- OWASP MASVS
- NIST SP 800-82: ICS Security Requirements & Compliance
- NIST 800-207 (Zero Trust)
- HECVAT: Requirements and How to Achieve Compliance
- NIST SP 800-53 Rev. 5: Scope, Changes & Key Enhancements
- COSO Framework: Requirements and How to Achieve Compliance
- NIST SP 800-46: Telework and Remote Access Security
- COBIT 5: Requirements and How to Achieve Compliance
- ICDM: Israeli Cyber Defense Methodology Requirements
- OWASP ASVS: Application Security Verification Standard
- MITRE ATT&CK Framework: Uses, Benefits & How to Apply It
- ISO 27001: Requirements and How to Achieve Compliance
- CIS Controls: Requirements, Implementation Groups & Compliance
- Australian Privacy Act 1988 (Cth) with 2024 Amendments - Description
- LGPD (Brazil)
- Thailand's Personal Data Protection Act
- Qatar PDPPL (Law No. 13 of 2016): Compliance Guide
- South Korea Personal Information Privacy Act
- Nigerian Data Protection Act
- Turkey KVKK (Law No. 6698): Data Protection Law Guide
- Washington My Health My Data Act (MHMDA)
- Singapore Personal Data Protection Act (PDPA)
- Philippines Data Privacy Act of 2012
- South Korea AI Act
- APPI (Japan)
- PDPL (UAE)
- PDPL (Saudi)
- ืืืง ืืื ืช ืืคืจืืืืช
- India Digital Personal Data Protection Act (DPDP)
- What is the New Jersey Privacy Act?
- What is the IDPA?
- What is the Rhode Island Privacy and Security Act (RIDPA)?
- What is the MNDPA?
- Tennessee Information Protection Act
- ย Delaware Personal Data Privacy Act (DPDPA)
- Texas Data Privacy and Security Act (TDPSA)
- Oregon Consumer Privacy Act (OCPA)
- Nebraska Data Privacy Act (NDPA)
- Kentucky Consumer Data Protection Act (KCDPA)
- PIPEDA
- Utah Consumer Privacy Act (UCPA)ย
- Colorado Privacy Act (CPA)ย
- Montana Consumer Data Privacy Act (MCDPA): Requirements and 2025 Amendments
- VCDPA
- Personal Information Privacy Law (PIPL) of China
- Nevada Privacy Law
- POPIA
- GDPR (EU and UK): Principles, Rights and How to Comply
- NIST Privacy Framework: Requirements and How to Comply
- FERPA Compliance: Requirements and How to Achieve It
- NY SHIELD Act: Requirements and How to Comply
- ISO/IEC 27701: PIMS Requirements and How to Comply
- TISAX
- Oklahoma Data Privacy Act (OKDPA)
- Cyber Fundamentals (CyFun)
- Cyber Resilience Act (EU)
- ISO 9001
- LGPD (Brazil)
- Singapore AI Frameworkย
- South Korea Personal Information Privacy Act
- Nigerian Data Protection Act
- Singapore Personal Data Protection Act (PDPA)
- Philippines Data Privacy Act of 2012
- APPI (Japan)
- PDPL (UAE)
- PDPL (Saudi)
- Cyber Essentials Plus (v3.2 โ Technical Testing Prep)
- EU AI ACT
- HECVAT 4.0
- Information Security Manual (ISM)
- What is the New Jersey Privacy Act?
- What is the IDPA?
- What is the Rhode Island Privacy and Security Act (RIDPA)?
- What is the MNDPA?
- Texas Data Privacy and Security Act (TDPSA)
- Oregon Consumer Privacy Act (OCPA)
- Nebraska Data Privacy Act (NDPA)
- SWIFT CSP 2026
- CJIS v5.9.5
- Florida Digital Bill of Rights (FDBR)
- Nevada Privacy Act
- Iowa Consumer Data Protection Act (ICDPA)
- ISO 42001
- NIS2
- HITECH Act
- What is the CPRA Act?
- IRS publication 1345
- ESG
- Cyber Essentials (UK)
- ISO 27002
- UAE IA
- Personal Information Privacy Law (PIPL) of China
- Recent Frameworks
FFIEC Compliance: Requirements and How to Achieve It
June 14, 2021
GDPR (EU and UK): Principles, Rights and How to Comply
June 14, 2021
NY SHIELD Act: Requirements and How to Comply
June 14, 2021
OWASP ASVS: Application Security Verification Standard
June 14, 2021
ISO 27001: Requirements and How to Achieve Compliance
June 14, 2021
ISO/IEC 27701: PIMS Requirements and How to Comply
June 14, 2021
8 Best AI Powered GRC Tools in 2026
October 6, 2026
6 Best Operational Risk Management Software Platforms in 2026
September 3, 2026
Cyber Assessment Framework (CAF) Version 4.0ย
August 31, 2026
All Standards | Compliance
Oklahoma Data Privacy Act (OKDPA)
What is the Oklahoma Data Privacy Act? The Oklahoma Data Privacy Act (OKDPA), enacted through Senate Bill 546, is Oklahoma’s first comprehensive consumer data privacy law. Signed by Kevin Stitt…
Cyber Fundamentals (CyFun)
What is CyFun CyFun, short for CyberFundamentals Framework, is a cybersecurity maturity framework developed by the Centre for Cybersecurity Belgium (CCB). It provides organizations with a structured and scalable approach…
Cyber Resilience Act (EU)
What is the Cyber Resilience Act (EU)? The Cyber Resilience Act (CRA) is a European Union regulation designed to establish mandatory cybersecurity requirements for products with digital elements placed on…
LGPD (Brazil)
What is the LGPD (Brazil)? The Lei Geral de Proteรงรฃo de Dados Pessoais (LGPD), or General Data Protection Law (Law No. 13.709/2018), is Brazilโs comprehensive data protection framework, inspired by…
Singapore AI Frameworkย
What is the Singapore AI Framework? Singapore AI Framework approach is anchored in the National AI Strategy (NAIS), which outlines the countryโs goals for safe, trustworthy, and effective AI adoption.…
South Korea Personal Information Privacy Act
What is South Korea PIPA? The Personal Information Protection Act (PIPA) is South Koreaโs principal data protection law, originally enacted in 2011 and significantly amended in recent years to strengthen…
Nigerian Data Protection Act
What is the Nigerian Data Protection Act? The Nigeria Data Protection Act, 2023 (NDPA) is the countryโs first comprehensive data protection law, signed into force on June 12, 2023. It…
Singapore Personal Data Protection Act (PDPA)
What is the Personal Data Protection Act (PDPA)? The Singapore Personal Data Protection Act (PDPA), enacted in 2012 and enforced by the Personal Data Protection Commission (PDPC), is the nationโs…
Philippines Data Privacy Act of 2012
What is the Data Privacy Act (DPA)? The Philippines Data Privacy Act of 2012 (Republic Act No. 10173), commonly referred to as the DPA, is the countryโs primary data protection…
APPI (Japan)
What is APPI (Japan)? APPI (Japan) stands for the Act on the Protection of Personal Information, formally known as Act No. 57 of 2003. It is Japanโs main data protection…
PDPL (UAE)
What is PDPL (UAE)? The Personal Data Protection Law (PDPL), formally known as Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, is the United Arab Emiratesโ…
PDPL (Saudi)
What is PDPL (Saudi)? The Personal Data Protection Law (PDPL) is Saudi Arabiaโs first comprehensive privacy law, designed to protect the personal data of individuals and regulate how organizations handle…
Cyber Essentials Plus (v3.2 โ Technical Testing Prep)
What is Cyber Essentials Plus (v3.2 โ Technical Testing Prep)? Cyber Essentials Plus (CE+) is a UK government-backed cybersecurity certification scheme developed by the National Cyber Security Centre (NCSC) and…
HECVAT 4.0
What is HECVAT 4.0? HECVAT 4.0 (Higher Education Community Vendor Assessment Toolkit) is a standardized framework designed to help higher education institutions evaluate the cybersecurity, privacy, and compliance practices of…
Information Security Manual (ISM)
What is the Information Security Manual (ISM)? The Information Security Manual (ISM) is a cyber security framework produced by the Australian Signals Directorate (ASD). It helps organisations protect information technology…
What is the New Jersey Privacy Act?
The New Jersey Privacy Act (NJDPA) is a state-level legislation designed to safeguard the personal information of New Jersey residents and provide them with enhanced rights over their data. The…
What is the IDPA?
The Indiana Data Protection Act (IDPA) is a state-level privacy law designed to protect the personal data of Indiana residents. Modeled after similar data protection laws across the United States,…
What is the Rhode Island Privacy and Security Act (RIDPA)?
The Rhode Island Privacy and Security Act (RIDPA) is a state privacy law aimed at safeguarding the personal information of Rhode Island residents. Enacted to address the growing risks of…
What is the MNDPA?
The Minnesota Data Privacy and Security Act (MNDPA) is a comprehensive state-level privacy law designed to protect the personal information of Minnesota residents. Enacted to address growing concerns over data…
Texas Data Privacy and Security Act (TDPSA)
What is the Texas Data Privacy and Security Act? The Texas Data Privacy and Security Act (TDPSA) is a state law designed to protect the privacy and security of Texas…
Oregon Consumer Privacy Act (OCPA)
What is the Oregon Consumer Privacy Act? The Oregon Consumer Privacy Act (OCPA) is a state privacy law that sets guidelines for how businesses should collect, use, and protect the…
Nebraska Data Privacy Act (NDPA)
What is the Nebraska Data Privacy Act? The Nebraska Data Privacy Act (NDPA) is a state-level privacy law designed to protect Nebraska residents’ personal information and ensure that businesses operating…
SWIFT CSP 2026
What is the SWIFT CSP? The SWIFT Customer Security Programme (CSP) is a cybersecurity initiative developed by the SWIFT network to protect the global financial messaging ecosystem. SWIFT stands for…
CJIS v5.9.5
What is CJIS (v5.9.5)? The Criminal Justice Information Services (CJIS) Security Policy v5.9.5 is a comprehensive security framework established by the Federal Bureau of Investigation (FBI). It sets standards for…
Florida Digital Bill of Rights (FDBR)
What is the Florida Digital Bill of Rights (FDBR)? The Florida Digital Bill of Rights (FDBR) is a comprehensive data privacy law that took effect on July 1, 2024. It…
Nevada Privacy Act
What is the Nevada Privacy Act? The Nevada Privacy Act (NPA), also referred to as NRS 603A, is a state-specific data privacy framework aimed at enhancing the protection of personal…
Iowa Consumer Data Protection Act (ICDPA)
What is the Iowa Consumer Data Protection Act (ICDPA)? The Iowa Consumer Data Protection Act (ICDPA) is a data privacy law that took effect on January 1, 2025. This framework…