Secure Controls Framework (SCF)
May 30, 2022
Centraleyes Resource Center
- Yair Solow Featured on Bugy's Founder Interviews
- Centraleyes Chosen as Global Top 5 Startups of the Year - Interview
- Centraleyes on Cyber Ghost: Interview with Yair Solow
- Spotlight Q&A with Centraleyes at Safety Detectives
- Centraleyes Expands Automated Risk Register To Cover All Enterprise Risk
- New Centraleyes 4th Generation Release Officially Goes Live
- Yair Solow Featured on VPN Mentor
- Yair Solow on CNN
- CyGov Signs a Strategic Agreement with R3 (Spanish)
- Centraleyes Welcomes Co-Founder of Optiv, Dan Burns, to Its Board of Directors
- Centraleyes Continues to Expand Its Global Network of Strategic Partners with UK-based ITC Secure
- Centraleyes Introduces First Automated Risk Register
- Yair Solow Featured on Website Planet
- Trevor Failor named head of sales at CyGov
- CyGov is rebranding its platform as Centraleyes
- Cybersecurity Company Cygov Partners With Risk Management Company Foresight
- CyGov agrees strategic partnership with top 200 MSSP Cybriant
- Cyber Resilience Resource for Businesses Re-Deploying Remotely
- The Four New Pillars of Corporate Protection Yair Solow on InfoSecurity Magazine
- CyGov selected by SixThirty as Top Cyber Security Startup
- Europe's Top Cyber Security Startups
- CyGov Interviewed by MediaSet
- Eli Ben Meir's article in Security Intelligence
- Yair Solow on i24 News
- CyGov Selected by WorldBank
- Eli Ben Meir OpEd in the Houston Chronicle
- Yair Solow and Eli Ben Meir Present at the SparkLabs Demoday 8
- Enhance Your Cyber Maturity With ITSM Integration and Automated Remediation
- Ensure Your Ongoing Compliance With Automatic Framework Reassessment Tasks
- Stay in the Know With a Full Activity Log of Your Assessment Collection
- Add a New Entity to Perform Your Assessment in 10 Seconds
- Quantify Financial Risk With Centraleyes Platform Primary Loss Calculator
- Cover Your Entire Environment With Centraleyes's Risk Application Assessments
- Communicate Cyber Risk With Your Executives in an Intuitive, Beautifully Visualized Board Reporting
- Stay on Top of Your Vendors' Cyber History With In-Depth External Scans
- Automate the Creation and Maintenance of a Risk Register, Saving Hours on Manual Work
- Add a New Framework and Distribute Assessments in Your Organization
- View Your Organization's Risk Scoring Through the NIST Tiering Lens
- Most Intuitive Way for Compliance With the Framework Navigation Tool
- Always Prepared for the Next Task With Automated Remediation
- Effective Team Work With Drag-and-Drop Control Assignment
- Get Real-Time Critical Alerts That are Specifically Relevant to You
- MSSPs Can Manage Multiple Clients Under One Platform
- Onboard a New Vendor in Just 30 Seconds
- Turn Hours of Work Into Seconds with Centraleyes Vendor Risk Profile
- Always Informed with Centraleyes Domain Benchmarking
- Salt Typhoon Campaign: A Wake-Up Call for U.S. Telecoms and National Security
- When Your Coffee Break Faces a Cyber Threat
- CISOs, It’s Time to Insure Your Role—Literally
- Telecom, Airline, and Utilities Move into Highest Cyber-Risk Category, Says Moody’s
- Under the Mask of Copyright: How Phishing Attacks Are Evolving
- New Indicators of Compromise Revealed for Critical FortiManager Vulnerability
- How Attackers are Using EDRSilencer to Fly Under the Radar
- Operation Token Mirrors
- OpenAI Disrupts 20+ Malicious Campaigns Using AI for Cybercrime and Disinformation
- Is Temu the Next TikTok? House Republicans Sound the Alarm on Data SecurityÂ
- Hackers Target Cybersecurity Job Seekers
- UK Data Centres Crowned Critical National Infrastructure
- White House and CISA Double Down on Securing Open Source Software: A New Era of Vigilance
- Massive Data Breach Exposes Personal Information of Billions
- Whistle While You Work
- Delta’s Mirror Moment: A Play of Third-Party Reflection
- The Great Cyber Debate: Regulation vs. Innovation
- CrowdStrike Outage
- How is "Materiality" Defined According to the SEC Disclosure Rules?
- Balancing Act: Streamlining Federal Cybersecurity RegulationsÂ
- Auto Sales Hit a Cyber SpeedbumpÂ
- Explainer: The CDK Global Ransomware Attack
- ​​Micro-Managed: AMD Investigates IntelBroker HackÂ
- Microsoft Puts Recall on Hold
- Snowflake Breach Snowballs
- Game Over? Law Enforcement Plays Hardball in Operation Endgame
- Cybersecurity in Sports: A New Arena for Risk Management
- Boeing's Sky-High Ransomware Refusal
- What was Behind the Change Healthcare Breach that Shook the Healthcare Industry?
- Cisco Raises Concerns Over Surge in Brute-Force Attacks Targeting VPN and Web Services
- Bipartisan Proposal Sparks Hope for American Privacy Rights Act
- Microsoft Responsible for Made-in-China Hack that Targeted US Officials
- AI Gets an Endorsement from Coalition
- NIST NVD "Under Construction"
- TutaCrypt to Thwart 'Harvest Now, Decrypt Later' Attacks
- 9.8/10 Severity Flaw in Team City- Patch Now!
- Blackcat Claims Responsibility for the UnitedHealth Change Breach
- US Gov's Cyber Survival Guide for Water Utilities
- Safeguarding Elections Amidst the Deepfake Deluge
- Faking the Figures (and the Faces): Deepfake Financial Frauds
- How to Build a Successful GRC Program to Help Reduce Your Risk Posture
- How to Stay Secure and Compliant in a World of Regulatory turmoil
- Don’t Keep Your Head in the Clouds – How to Protect Yourself from Virtual Risk
- Flash Webinar: How to Know When it's Time to Build a Risk Management Program
- Enhancing Cyber Risk Management Through the Power of Automation - Boutique Webinar
- Flash Webinar: From Technical to Business Risk - How to Communicate With Your Board
- Flash Webinar: What You Can Learn From the SolarWinds Attack to Lower Your Chances of Being Breached
- Flash Webinar: Supply Chain, 3rd-Party Vendors and the Silent Assassin Among Them
- Flash Webinar: Cyber Risk Management - it Doesn't Have to Be So Painful
- Automated Compliance Evidence: Types and How to Choose the Right One
- Mapping HIPAA to ISO 27001: A Comprehensive Guide
- How Will DORA Affect the Board of Directors?
- How to Manage Multi-Framework Compliance
- Everything You Need To Know About The New York Privacy Act
- The Best 15 Enterprise Compliance Solutions Tools of 2024
- Agent-Based vs. Agentless Security: Key Differences, Benefits, and Best Use Cases
- Top 7 Vanta Alternatives to Consider in 2025
- 10 Best Drata Alternatives to Consider for Compliance Management in 2024
- What Is The Content Delivery & Security Association (CDSA)?
- Best 7 Compliance Risk Assessment Tools for 2024
- How to Implement Zero Trust Security in Your Organization
- Unlock the Future of GRC: Top Innovations Transforming the Industry
- What is Enterprise Compliance and Why is It Important?
- What is AI Risk Management?
- 5 Best Practices for Data Privacy Compliance
- The Complete List of the Best Internal Audit Management Software
- The Best 9 Cloud Security Tools of 2024
- How to Meet CMMC 2.0 Self-Assessment Requirements: 5 Key Strategies
- Top 7 Threat Intelligence Platforms for 2024
- HICP vs. HIPAA: Understanding the Differences and Their Impact on Healthcare Compliance
- Understanding the Florida Digital Bill of Rights
- How to Automate GDPR Compliance
- 8 Best Cyber Risk Mitigation Tools You Should Know
- 2024's Best Open Source Cybersecurity Tools
- Understanding Corporate Compliance Programs and Their Importance for Every Organization
- Importance of AI Governance Standards for GRC
- Comparing Compliance Management Software: Key Features and How They Stack Up
- An Introduction to the Hawaii Consumer Privacy Protection Act
- FAIR Model Risk Management - Pros and Cons
- Mastering the Art of GRC Reporting: Essential Tips for Engaging the Board
- Best 10 Regulatory Change Management Software of 2024
- Harnessing the Power of GRC Software for Enhanced Business Resilience and Compliance
- FFIEC Will Sunset the Cybersecurity Assessment Tool: Everything You Need to be Prepared
- FIPPA: Understanding Canada's Information and Protection Privacy Law
- Understanding British Columbia's Personal Information Protection Act (PIPA)
- 10 Best ERM Software in 2024: The Complete Guide
- New Jersey Privacy Act 2024: What to Expect
- Risk Register Templates: Enhancing Your Risk Management Strategy
- Colorado New AI Act: Everything you Need to Know
- Cyber Leaders of the World: Chris Lockery, CISO at Help at Home
- Cyber Leaders of the World: Michael Anderson, CISO at the Dallas Independent School District
- Cyber Leaders of the World: Timothy Spear, Co-Founder and CTO of Whonome
- Cyber Leaders of the World: Marc Johnson, CISO at Impact Advisors
- Cyber Leaders of the World: Craig Williams, CISO at Secure Data Technologies
- Cyber Leaders of the World: Bill Genovese, CIO Advisory Partner at Kyndryl
- Cyber Leaders of the World: Dr. Brian Callahan, Graduate Program Director & Lecturer at ITWS@RPI, and CISO at PECE
- Cyber Leaders of the World: Chris Grundemann, Research Category Lead for Security and Risk at GigaOm
- Cyber Leaders of the World: Barak Blima, CISO at CHEQ
- Cyber Leaders of the World: Tony Velleca, CEO at CyberProof and CISO at UST
- Cyber Leaders of the World: Rob Black, CEO and Founder of Fractional CISO
- Cyber Leaders of the World: Zachary Lewis, CISO at the University of Health Sciences and Pharmacy in St. Louis
- Cyber Leaders of the World: Dan Wilkins, CISO at the State of Arizona
- Cyber Leaders of the World: Sagar Narasimha, CISO at Amagi
- Cyber Leaders of the World: Seema Sharma, Global Head of Information Security & Data Privacy at Servify
- Cyber Leaders of the World: Shay Siksik, VP of Customer Experience at XM Cyber
- Cyber Leaders of the World: Raz Karmi, CISO at SimilarWeb
- Information Security Compliance
- Privacy Threshold Assessment
- Incident Response Model
- GRC Maturity Model
- Risk Control Matrix
- HIPAA Employee Training
- Vendor Scorecard
- Threat Intelligence Platform
- Standard Contractual Clauses
- NIS Regulations
- Living-Off-the-Land Attacks
- GRCaaS
- Discretionary Access Control (DAC)
- Covered Defense Information (CDI)
- AI Secure Development
- Approved Scanning Vendor (ASV)
- Law Enforcement Sensitive (LES)
- Content Delivery & Security Association
- Report on Compliance (ROC)
- OT Cyber Risk Framework
- Unified Privacy Framework
- Â Data Subprocessor
- Threat-Based Risk Assessment
- Semi-Quantitative Risk Assessment
- Vulnerability-Based Risk Assessment
- Risk Management Strategy
- Authorization to Operate (ATO)
- StateRAMP
- Segregation of Duties
- PCI Penetration Testing
- Due Diligence Questionnaire
- Key Risk Indicator
- AI Policy
- TISAX
- COPPA
- AI Risk Management
- AI Auditing
- Data Exfiltration
- Data Sovereignty
- Control Objectives for Information and Related Technologies (COBIT)
- What Should Be Included in a Security Policy?
- What Happens if I Fail a SOC 2 Audit?
- What is the first step of PCI DSS compliance?
- What's the Difference Between TX-RAMP, StateRAMP, and FedRAMP?
- What are the ISO Standards for AI
- What’s the difference between NIST 800-53 and NIST 800-171?
- Which AI Compliance frameworks can I choose?
- What is the difference between cloud governance and cloud compliance?
- What are the types of compliance risk?
- What are the benefits of continuous risk management?
- What is the difference between risk assessment and risk analysis?
- What are the Benefits of cyber risk quantification?
- How to Achieve Continuous Compliance?
- How do you implement continuous controls monitoring?
- What is a maturity assessment process?
- What are the different types of compliance management tools?
- How long does SOC 2 compliance take?
- What are the Differences Between Internal and External Penetration Testing?
- What is the difference between proactive and reactive risk management?
- Why is a data retention policy important?
- What is the operational risk management process?
- How to implement the COSO framework?
- How do you perform a cyber security risk assessment?
- How to develop an enterprise risk management framework?
- How do you respond to a security questionnaire?
- What are the main steps in the threat modeling process?
- What exactly is considered PHI according to HIPAA?
- What does the PCI Compliance Auditor Look At?
- How to Detect and Prevent Data Leakage?
- What are the Challenges Associated with Cloud Security Management?
- How Many Techniques Are There in MITRE Att&ck?
- What Are the Benefits of Conducting a Risk Assessment?
- What are the categories of controls in ISO 27001?
- How Does ABAC Differ From Other Access Control Models?
- What Does a Compliance Management System Look Like?
- What Are the NIST CSF Implementation Tiers?
- What is the Purpose of Compliance Attestation?
- How do I become NIST 800-171 compliant?
- Why are the three rules of HIPAA necessary?
- What are the seven categories of risk?
- Last Resources
FFIEC
June 14, 2021
PCI DSSÂ
June 14, 2021
GDPR
June 14, 2021
SOC 2 Type II
June 14, 2021
NY SHIELD Act
June 14, 2021
OWASP ASVS
June 14, 2021
ISO 27001
June 14, 2021
CIS Controls
June 14, 2021
ISO 27701
June 14, 2021
NIST CSF
May 18, 2021
Automated Compliance Evidence: Types and How to Choose the Right One
December 9, 2024
Mapping HIPAA to ISO 27001: A Comprehensive Guide
December 8, 2024
Resources | Blog
Automated Compliance Evidence: Types and How to Choose the Right One
You’re in the middle of an audit, and it’s the usual drill: toggling between spreadsheets, email chains,…
Mapping HIPAA to ISO 27001: A Comprehensive Guide
Two Foundational Frameworks: ISO 27001 and HIPAA With the growing number of risks in the information security…
How Will DORA Affect the Board of Directors?
How DORA is Transforming the Management’s Role in Financial Services EU’s Digital Operational Resilience Act (DORA) ushers…
How to Manage Multi-Framework Compliance
Managing one compliance framework is a juggling act. But what happens when your company needs to handle…
Everything You Need To Know About The New York Privacy Act
Finding a balance between the need to handle personal information and protecting the privacy of individuals can…
The Best 15 Enterprise Compliance Solutions Tools of 2024
Corporate compliance programs have long been viewed as necessary but costly operations. However, that line of thought…
Agent-Based vs. Agentless Security: Key Differences, Benefits, and Best Use Cases
When securing your cloud infrastructure, choosing the right approach for monitoring and protection is essential. Two major…
Top 7 Vanta Alternatives to Consider in 2025
The Rise of Compliance-Centric Platforms Vanta was developed to help organizations achieve SOC 2 compliance quickly. Compliance…
10 Best Drata Alternatives to Consider for Compliance Management in 2024
If you’re familiar with platforms like Drata, you may appreciate their streamlined compliance processes and integrations. But…
What Is The Content Delivery & Security Association (CDSA)?
The Content Delivery & Security Association (CDSA) has long been a cornerstone in the media and entertainment…
Best 7 Compliance Risk Assessment Tools for 2024
Organizations devote significant resources to their compliance risk assessments each year. Yet many compliance leads and senior…
How to Implement Zero Trust Security in Your Organization
What is Zero Trust? Zero Trust is a security model that assumes threats can exist inside and…
Unlock the Future of GRC: Top Innovations Transforming the Industry
I recently watched a video that struck me as a perfect metaphor for today’s challenges and innovations…
What is Enterprise Compliance and Why is It Important?
In today’s fast-paced business world, companies juggle numerous responsibilities—from meeting customer demands to navigating complex regulations. One…
What is AI Risk Management?
A mind-bending paradox is at the heart of modern risk management: AI is a risk, but it’s…
5 Best Practices for Data Privacy Compliance
With data breaches on the rise—over 3,200 incidents in the U.S. last year alone —businesses are increasingly…
The Complete List of the Best Internal Audit Management Software
What is an Internal Audit? An internal audit is an independent, objective evaluation of your organization’s performance.…
The Best 9 Cloud Security Tools of 2024
Navigating the sea of CSPM, KSPM, asset management, and cloud data storage secure service tools can be…
How to Meet CMMC 2.0 Self-Assessment Requirements: 5 Key Strategies
Partnering with the US Department of Defense (DoD) as a contractor offers lucrative prospects for your company,…
Top 7 Threat Intelligence Platforms for 2024
What is Threat Intelligence? Threat intelligence refers to collecting, analyzing, and disseminating information about potential or current…
HICP vs. HIPAA: Understanding the Differences and Their Impact on Healthcare Compliance
When it comes to healthcare data security, HIPAA is the name everyone knows. It’s been around for…
Understanding the Florida Digital Bill of Rights
Florida Senate Bill 262 has passed in the Republican-led Florida legislature. The Florida Privacy Act attempts to…
How to Automate GDPR Compliance
The General Data Protection Regulation (GDPR) is a comprehensive data protection law enacted by the European Union…
8 Best Cyber Risk Mitigation Tools You Should Know
Cyber risk mitigation is an ongoing process that aims to reduce the impact of cyber threats on…
2024's Best Open Source Cybersecurity Tools
There’s a prevailing myth that top-notch security solutions must come with a hefty price tag. Yet, this…
Understanding Corporate Compliance Programs and Their Importance for Every Organization
The Rising Tide of Regulatory Scrutiny Recent trends indicate that regulatory bodies are ramping up their efforts…
Importance of AI Governance Standards for GRC
The concept of “AI governance for GRC” presents an intriguing paradox. After all, isn’t GRC supposed to…
Comparing Compliance Management Software: Key Features and How They Stack Up
Compliance management software is designed to help organizations adhere to regulatory requirements and internal policies. It automates…
An Introduction to the Hawaii Consumer Privacy Protection Act
Updated September 2024 Here’s an interesting fact about the Hawaii bill of rights: The Hawaii constitution lists…
FAIR Model Risk Management - Pros and Cons
Information risk is not just a technical problem but affects the bottom line and daily activities of…
