Secure Controls Framework (SCF)
May 30, 2022
Centraleyes’s Resource Center
Centraleyes Provides You With Various Resources
On the Different Industries And Services
- Yair Solow Featured on Bugy's Founder Interviews
- Centraleyes Chosen as Global Top 5 Startups of the Year - Interview
- Centraleyes on Cyber Ghost: Interview with Yair Solow
- Spotlight Q&A with Centraleyes at Safety Detectives
- Centraleyes Expands Automated Risk Register To Cover All Enterprise Risk
- New Centraleyes 4th Generation Release Officially Goes Live
- Yair Solow Featured on VPN Mentor
- Yair Solow on CNN
- CyGov Signs a Strategic Agreement with R3 (Spanish)
- Centraleyes Welcomes Co-Founder of Optiv, Dan Burns, to Its Board of Directors
- Centraleyes Continues to Expand Its Global Network of Strategic Partners with UK-based ITC Secure
- Centraleyes Introduces First Automated Risk Register
- Yair Solow Featured on Website Planet
- Trevor Failor named head of sales at CyGov
- CyGov is rebranding its platform as Centraleyes
- Cybersecurity Company Cygov Partners With Risk Management Company Foresight
- CyGov agrees strategic partnership with top 200 MSSP Cybriant
- Cyber Resilience Resource for Businesses Re-Deploying Remotely
- The Four New Pillars of Corporate Protection Yair Solow on InfoSecurity Magazine
- CyGov selected by SixThirty as Top Cyber Security Startup
- Europe's Top Cyber Security Startups
- CyGov Interviewed by MediaSet
- Eli Ben Meir's article in Security Intelligence
- Yair Solow on i24 News
- CyGov Selected by WorldBank
- Eli Ben Meir OpEd in the Houston Chronicle
- Yair Solow and Eli Ben Meir Present at the SparkLabs Demoday 8
- Enhance Your Cyber Maturity With ITSM Integration and Automated Remediation
- Ensure Your Ongoing Compliance With Automatic Framework Reassessment Tasks
- Stay in the Know With a Full Activity Log of Your Assessment Collection
- Add a New Entity to Perform Your Assessment in 10 Seconds
- Quantify Financial Risk With Centraleyes Platform Primary Loss Calculator
- Cover Your Entire Environment With Centraleyes's Risk Application Assessments
- Communicate Cyber Risk With Your Executives in an Intuitive, Beautifully Visualized Board Reporting
- Stay on Top of Your Vendors' Cyber History With In-Depth External Scans
- Automate the Creation and Maintenance of a Risk Register, Saving Hours on Manual Work
- Add a New Framework and Distribute Assessments in Your Organization
- View Your Organization's Risk Scoring Through the NIST Tiering Lens
- Most Intuitive Way for Compliance With the Framework Navigation Tool
- Always Prepared for the Next Task With Automated Remediation
- Effective Team Work With Drag-and-Drop Control Assignment
- Get Real-Time Critical Alerts That are Specifically Relevant to You
- MSSPs Can Manage Multiple Clients Under One Platform
- Onboard a New Vendor in Just 30 Seconds
- Turn Hours of Work Into Seconds with Centraleyes Vendor Risk Profile
- Always Informed with Centraleyes Domain Benchmarking
- Dollar Tree Breach: Supplier Roots Sprout Risks
- Applying Digital Pressure to Stop the “Citrix Bleed”
- 30-Year-Old Medical Protocol Making Headlines
- 88 Million Americans Affected in 2023 By Healthcare Data Breaches
- Critical Atlassian Flaw Has a Simple Fix
- D.C. Voter Data Leak: What We Know So Far
- Centraleyes Leads the Way with Full PCI DSS 4.0 Compliance Support on its Innovative Platform
- Will the Real Admin Please Step Up?
- Straightening Out the curl Vulnerability
- Vague in the Hague: Who Is Behind the ICC Data Breach?
- Forever 21 Discloses Data Breach Impacting Over Half a Million
- FBI on a Wild Duck Hunt after Qakbot
- The Enemy Within: Tesla’s Data Breach Was an “Inside Job”
- NIST CSF is Getting a Makeover
- Russia Prime Suspect for UK Electoral Commission Cyber Attack
- Storm-0558 Isn’t Over Yet
- Google-Owned VirusTotal Data Leak: Result of Human Error
- Made-In-China Hack Infiltrates the US Government
- EU-U.S. Data Privacy Framework: Is Adequate Good Enough?
- Anonymous Sudan Or Anonymous Russia?
- Over 100,000 ChatGPT User Account Credentials For Sale on the Dark Web
- Ransomware Causes St. Margaret Health’s Permanent Closure
- MOVEit Transfer Vulnerability Going Wild
- 8Base on a Ransomware Rampage
- FTC Penalizes Amazon with Millions in Fines
- Record 1.3 Billion GDPR Penalty Slapped on Meta
- Health Sector Warned of Veeam Vulnerability
- Malware Strain Disguised as a Chrome Updater
- Critical Flaw Found in DNA Sequencers
- The NIST CSF Makeover Scheduled for the Summer
- Privacy in the Age of ChatGPT
- Emergency Update for Apple Devices
- Operation Cookie Monster
- Centraleyes Launches the First of its Kind Higher-Ed Cyber Risk Program in Collaboration with FSU
- Call for Restraint in the Race to AI
- Saks Fifth Avenue Added to GoAnywhere Victim List
- Beware: SVB’s Collapse Being Exploited By Scammers
- New TSA Regulations for Airlines Facing “Persistent Cybersecurity Threats”
- CISA Calls on Tech Developers to Put Security into Digital Products
- Social Engineering “Smishing” Attack on Coinbase
- How to Build a Successful GRC Program to Help Reduce Your Risk Posture
- How to Stay Secure and Compliant in a World of Regulatory turmoil
- Don’t Keep Your Head in the Clouds – How to Protect Yourself from Virtual Risk
- Flash Webinar: How to Know When it's Time to Build a Risk Management Program
- Enhancing Cyber Risk Management Through the Power of Automation - Boutique Webinar
- Flash Webinar: From Technical to Business Risk - How to Communicate With Your Board
- Flash Webinar: What You Can Learn From the SolarWinds Attack to Lower Your Chances of Being Breached
- Flash Webinar: Supply Chain, 3rd-Party Vendors and the Silent Assassin Among Them
- Flash Webinar: Cyber Risk Management - it Doesn't Have to Be So Painful
- Mastering the German Federal Data Protection Act (BDSG-New): A Deep Dive
- How Diversity and Inclusion Initiatives Can Reduce Cyber Risk
- Implementing Effective Compliance Testing: A Comprehensive Guide
- The Ultimate ESG Audits Checklist
- A Full Guide to Achieving SOC 2 Certification for Startups
- HIPAA Compliance Checklist for Enhanced Data Security
- Understanding SEC Cyber Disclosure Rules and CISO Liability
- HITRUST vs. HIPAA: Ensuring Data Security and Compliance
- Understanding the Core Principles of Information Security
- ISO 27001 Mandatory Documents: A Guide to Achieving Compliance
- Supply Chain Vendor Risk Assessment: The Definitive Guide
- Understanding the Difference Between Penetration Testing and Vulnerability Scanning
- Safeguarding Your Business From Social Media Risks
- Strategies for Automating a Cyber Risk Assessment
- Essential Cybersecurity KPIs to Track for Effective Risk Management
- Best Practices in Audit Management Process
- GRC Automation: The Competitive Edge for Enterprises
- Everything You Need To Know About The New York Privacy Act 2021
- Identifying and Addressing Internal Control Weaknesses
- Mitigating Market Risk: Effective Strategies for Success
- Ultimate Guide to Selecting a Compliance Management Tool
- The Importance of ESG Metrics in Driving Sustainable Business Practices
- PCI DSS 4.0: What's New and How to Stay Compliant
- Understanding the Digital Operational Resilience Act and Its Pillars
- How to Meet CMMC 2.0 Self-Assessment Requirements: 5 Key Strategies
- Cyber Insurance Explained: What It Covers, Who Needs It
- Maximizing Success: A Guide to Developing and Monitoring Your Risk Management Plan
- Decoding the Cyber Risk Quantification Models: Selecting the Right Framework
- Risks of Hybrid Working: Safeguarding Cybersecurity in the New Era
- GRC Platform Features: Unleashing the Power of Comprehensive Capabilities
- CCPA Compliance Requirements: Ensure Your Business is Compliant
- Mastering Vulnerability Management: Best Practices for Cybersecurity Success
- Best Practices for Automating Third-Party Risk Management
- How Security Automation Works
- Federal Privacy Legislation: What You Need to Know
- Cyber Risk Management as a Best Practice: Benefits to Financial Firms
- Selecting the Best Cyber Risk Quantification Models for Your Organization
- Security Audit Benefits for Small Businesses
- Benefits of Information Security Automation
- Crafting a Successful Cybersecurity Risk Management Strategy
- Cyber Leaders of the World: Chris Lockery, CISO at Help at Home
- Cyber Leaders of the World: Michael Anderson, CISO at the Dallas Independent School District
- Cyber Leaders of the World: Timothy Spear, Co-Founder and CTO of Whonome
- Cyber Leaders of the World: Marc Johnson, CISO at Impact Advisors
- Cyber Leaders of the World: Craig Williams, CISO at Secure Data Technologies
- Cyber Leaders of the World: Bill Genovese, CIO Advisory Partner at Kyndryl
- Cyber Leaders of the World: Dr. Brian Callahan, Graduate Program Director & Lecturer at ITWS@RPI, and CISO at PECE
- Cyber Leaders of the World: Chris Grundemann, Research Category Lead for Security and Risk at GigaOm
- Cyber Leaders of the World: Barak Blima, CISO at CHEQ
- Cyber Leaders of the World: Tony Velleca, CEO at CyberProof and CISO at UST
- Cyber Leaders of the World: Rob Black, CEO and Founder of Fractional CISO
- Cyber Leaders of the World: Zachary Lewis, CISO at the University of Health Sciences and Pharmacy in St. Louis
- Cyber Leaders of the World: Dan Wilkins, CISO at the State of Arizona
- Cyber Leaders of the World: Sagar Narasimha, CISO at Amagi
- Cyber Leaders of the World: Seema Sharma, Global Head of Information Security & Data Privacy at Servify
- Cyber Leaders of the World: Shay Siksik, VP of Customer Experience at XM Cyber
- Cyber Leaders of the World: Raz Karmi, CISO at SimilarWeb
- Man-in-the-Middle Attack
- Digital Rights Management
- Content Disarm and Reconstruction
- Calculated Risk
- Data Residency
- Asset Risk Management
- Identity Security
- Risk Modeling
- CISO Board Report
- Risk Communication
- SOC 2 Bridge Letter
- Audit Documentation
- Enterprise Risk Management (ERM)
- Compliance Gap Analysis
- Security Misconfiguration
- Security Program Management
- Digital Risk Protection
- Advanced Persistent Threat
- Continuous Auditing
- Risk Control
- SSAE 16
- ISMS Awareness Training
- Risk Management Policy
- Risk Avoidance
- Resilience Management
- End-To-End Encryption
- Data Minimization
- Data Spillage
- Account Takeover
- Security Gap Analysis
- IoT Cybersecurity
- Issue Management
- Audit Management
- Risk Appetite Statement
- Cybersecurity Due Diligence
- IT GRC
- Penetration Testing
- Complimentary User Entity Controls
- Network Security Test
- Compliance Tracking
- How does the CMMC differ from NIST?
- What are the penalties for not reporting a HIPAA violation?
- What are the different versions of HECVAT?
- What are the 4 objectives of Enterprise Risk Management?
- Who needs to be ITAR compliant?
- What are the best practices for vendor risk management for CISOs?
- What are the three stages of the zero-trust security model?
- What are the NIST control families?
- Can ChatGPT replace compliance officers?
- How can thread modeling help an organization identify and mitigate potential risks?
- What is the average cost of penetration testing?
- What are the 4 things that PCI DSS Covers?
- How do risk heat maps help in effective risk management?
- What are the components of inherent risk?
- What Are the 7 Phases of Incident Response?
- What are the Five Elements of Risk Management?
- What are 3 COSO Internal Control Objectives?
- What are the 19 categories of CUI?
- What are the phases of an incident response plan?
- What are the Elements of an IRS Data Security Plan?
- What Are the Primary Components of Vendor Risk Management?
- How Do You Create a Data Classification Policy?
- What are the Steps in a Vendor Management Audit?
- What Are the Steps to Conduct a Robust Vendor Risk Assessment?
- What is the Purpose of Access Control Matrix?
- What is the NIST Cybersecurity Framework’s Approach to Risk Management?
- What is the Difference Between IT Security and IT Compliance?
- What Do Common Vulnerabilities and Exposures Represent?
- What are the types of attack surfaces?
- What Are the Benefits of a Compliance Automation Tool?
- How does FAIR fit into cyber security programs?
- How do you monitor third-party risks?
- Why Do CISOs Need to Quantify Cyber Risk?
- What Are the 4 Common Causes of Data Breaches?
- What Are Examples of Reputational Risks?
- What Can be Monitored with CCM?
- How Can Finance Companies Manage Vendor Risk?
- What are the 4 Steps of the Vulnerability Remediation Process?
- Do Any Laws Apply to Typosquatting and Cybersquatting?
- How do you implement the NIST cybersecurity framework using ISO 27001?
- Last Resources
FFIEC
June 14, 2021
PCI DSS
June 14, 2021
GDPR
June 14, 2021
SOC 2 Type II
June 14, 2021
NY SHIELD Act
June 14, 2021
OWASP ASVS
June 14, 2021
ISO 27001
June 14, 2021
CIS Controls
June 14, 2021
ISO 27701
June 14, 2021
NIST CSF
May 18, 2021
Dollar Tree Breach: Supplier Roots Sprout Risks
November 30, 2023
How Diversity and Inclusion Initiatives Can Reduce Cyber Risk
November 27, 2023
Resources | Platform Feature Reviews
Enhance Your Cyber Maturity With ITSM Integration and Automated Remediation
Centraleyes makes your data actionable and enhances your cyber maturity by automatically creating remediation workflows whenever a…
Ensure Your Ongoing Compliance With Automatic Framework Reassessment Tasks
Periodically reassessing your frameworks can be crucial to ensure your ongoing compliance and risk posture. With Centraleyes…
Stay in the Know With a Full Activity Log of Your Assessment Collection
The Centraleyes platform offers a full audit trail of all of the activities contained within your assessments,…
Add a New Entity to Perform Your Assessment in 10 Seconds
Creating a new entity in the Centraleyes Multi-Entity 1st Party module provides you with another layer of…
Quantify Financial Risk With Centraleyes Platform Primary Loss Calculator
Quantifying financial risk when it comes to risk management is quite difficult task. One of the most…
Cover Your Entire Environment With Centraleyes's Risk Application Assessments
The Centraleyes platform can be leveraged to run application assessments for various apps and software that are…
Communicate Cyber Risk With Your Executives in an Intuitive, Beautifully Visualized Board Reporting
The Centraleyes Boardview module is a game-changer in Executive Reporting! The platform allows you to create faster,…
Stay on Top of Your Vendors' Cyber History With In-Depth External Scans
The Centraleyes platform offers a source of automated intelligence data feeds, which complements the self-attestation collection made…
Automate the Creation and Maintenance of a Risk Register, Saving Hours on Manual Work
Centraleyes’s one-of-its-kind Automated Risk Register is the latest unique capability released in the platform’s cutting-edge, automated tools…
Add a New Framework and Distribute Assessments in Your Organization
Adding a new framework to an organization with the Centraleyes platform can be done with the click…
View Your Organization's Risk Scoring Through the NIST Tiering Lens
In our latest Centraleyes release we’ve added a NIST Tiering capability to the platform, which allows you…
Most Intuitive Way for Compliance With the Framework Navigation Tool
The Centraleyes platform has a unique breakdown screen that allows you to navigate through different frameworks in…
Always Prepared for the Next Task With Automated Remediation
The Centraleyes platform enables you to automatically collect, analyze and identify gaps. Once the gaps are identified,…
Effective Team Work With Drag-and-Drop Control Assignment
The Centraleyes platform gives you the ability to assign a specific question to one or multiple users…
Get Real-Time Critical Alerts That are Specifically Relevant to You
Centraleyes’s Critical Alerts Feed provides ongoing, real-time intelligence on new threats, vulnerabilities and regulations. This highly impactful…
MSSPs Can Manage Multiple Clients Under One Platform
Centraleyes is the only company in the world that has created a dedicated solution for Service Providers.…
Onboard a New Vendor in Just 30 Seconds
Onboarding new vendors to your Vendor Risk Assessment could take hours of work if not days due…
Turn Hours of Work Into Seconds with Centraleyes Vendor Risk Profile
When conducting vendor risk management it is important to create a risk profile on each and every…
Always Informed with Centraleyes Domain Benchmarking
When running risk management in your organization there is a tremendous amount of data points for collecting…
