SCF Architect Syllabus

You can download the SCF Architect syllabus from: https://securecontrolsframework.com/content/syllabus/scf-architect.pdf

Flexible Learning
Computer Based Training (CBT) to learn at your own pace on your own equipment.

Curriculum-Based Training
SCF-approved curriculum to support a strategic role in the SCF CAP Ecosystem. SCF Architects turn concepts into reality.
%20-%20white.png)
SCF Certification
Valuable certification to demonstrate subject matter expertise within the SCF CAP Ecosystem.
About The SCF Architect Course
SCF Architects are SAICO-certified individuals who have advanced SCF-related knowledge and competence necessary to: 1. Architect and design SCF-based cybersecurity and data protection programs. 2. Address the tactical, operational and strategic needs of the organization. 3. Assist SCF Practitioners with the implementation of SCF controls to turn concepts into reality. 4. Make adjustments to the cybersecurity and data protection programs to account for new and/or changed requirements. The SCF Architect training course is designed to refine a student’s existing knowledge of the following core concepts: 1. The structure and content of: a. Secure Controls Framework (SCF); and b. SCF Conformity Assessment Program (SCF CAP); 2. Scoping the assessment using the Unified Scoping Guide (USG); 3. Cybersecurity risk tolerance & materiality concepts; and 4. The assessment standards used to perform SCF CAP assessments. Students are required to meet minimum education and certification requirements to be a SCF Architect: 1. Current SCF Practitioner certification;* 2. Minimum of five (5) years’ experience as full-time cybersecurity professional; and 3. Familiarity with the following publications / resources: a. What Is the Secure Controls Framework (SCF) (e.g., structure, content, uses, etc.); b. Integrated Controls Management (ICM) Model; c. SCF Cybersecurity & Data Privacy Capability Maturity Model (C|P-CMM); d. SCF Cybersecurity & Data Privacy Risk Management Model (C|P-RMM); e. Unified Scoping Guide (USG); f. Cybersecurity risk tolerance & materiality concepts; g. NIST IR 8477 - Set Theory Relationship Mapping (STRM); h. SCF Conformity Assessment Program (SCF CAP); i. SCF CAP Code of Professional Conduct (CoPC); and j. Cybersecurity & Data Protection Assessment Standards (CDPAS); * NOTE - Upon obtaining status as a SCF Architect, there is no need to perform annual renewals of the SCF Practitioner certification, just the SCF Architect certification. The SCF Architect knowledge exam consists of one hundred (100) questions based on the course syllabus. A passing score of at least eighty percent (80%) is required to pass the knowledge exam and obtain certification as a SCF Architect. SCF Architect certifications are valid for a one (1) year period at which time, the certificate must be renewed or it is expired. The renewal process included paying a fee and taking a knowledge test to ensure the SCF Architect's continued proficiency in the subject matter.
SCF Architect Certification Is Valid For One Year
Once you earn your SCF Architect certification, ongoing maintenance is $250/year since that covers having both the SCF Practitioner and SCF Architect certifications, since SCF Practitioner is a prerequisite for SCF Architect.
$250.00
SFC Architect Course Curriculum
-
1
SCF Architect Overview
-
(Included in full purchase)
Course Overview & Prerequisites
-
(Included in full purchase)
Education / Certification Prerequisites
-
(Included in full purchase)
-
2
Secure Controls Framework (SCF) Overview
-
(Included in full purchase)
What Is The SCF?
-
(Included in full purchase)
SCF Domains
-
(Included in full purchase)
SCF Components
-
(Included in full purchase)
SCF Structure Visualization
-
(Included in full purchase)
Assessment Objectives (AOs)
-
(Included in full purchase)
Evidence Request List (ERL)
-
(Included in full purchase)
End Of Chapter Review
-
(Included in full purchase)
-
3
SCF STRM (Set Theory Relationship Mappings)
-
(Included in full purchase)
Set Theory Relationship Mapping (STRM) Overview
-
(Included in full purchase)
How Does The SCF Utilize STRM?
-
(Included in full purchase)
STRM Examples
-
(Included in full purchase)
End Of Chapter Review
-
(Included in full purchase)
-
4
SCF Risk Management
-
(Included in full purchase)
SCF Cybersecurity & Data Privacy Risk Management Model (C|P-RMM)
-
(Included in full purchase)
End Of Chapter Review
-
(Included in full purchase)
-
5
SCF Capability Management Model
-
(Included in full purchase)
SCF Cybersecurity & Data Privacy Capability Maturity Model (C|P-CMM)
-
(Included in full purchase)
Cybersecurity Maturity "Sweet Spot" Considerations
-
(Included in full purchase)
End Of Chapter Review
-
(Included in full purchase)
-
6
Integrated Controls Management (ICM) Model
-
(Included in full purchase)
A "How To GRC" Playbook
-
(Included in full purchase)
Defining Mandatory vs Discretional Controls
-
(Included in full purchase)
People, Processes, Technology, Data & Facilities (PPTDF)
-
(Included in full purchase)
ICM Principles
-
(Included in full purchase)
End Of Chapter Review
-
(Included in full purchase)
-
7
Control Scoping Using The Unified Scoping Guide (USG)
-
(Included in full purchase)
Unified Scoping Guide (USG) Overview
-
(Included in full purchase)
Scoping Does Not Equal Applicability
-
(Included in full purchase)
Zone-Based Approach To Implementing Data-Centric Security Protections
-
(Included in full purchase)
End Of Chapter Review
-
(Included in full purchase)
-
8
Overview - SCF Conformity Assessment Program (SCF CAP)
-
(Included in full purchase)
SCF CAP Ecosystem
-
(Included in full purchase)
SCF & Cyber AB Relationship
-
(Included in full purchase)
SCF CAP Body of Knowledge (SCF CAP BoK)
-
(Included in full purchase)
Control Designations
-
(Included in full purchase)
Conformity Designations (SCF CAP - Pass / Fail Results)
-
(Included in full purchase)
Conformity Designation - STRICTLY CONFORMS
-
(Included in full purchase)
Conformity Designation - CONFORMS
-
(Included in full purchase)
Conformity Designation - SIGNIFICANT DEFICIENCY
-
(Included in full purchase)
Conformity Designation - MATERIAL WEAKNESS
-
(Included in full purchase)
SCF CAP Assessment Guides
-
(Included in full purchase)
End Of Chapter Review
-
(Included in full purchase)
-
9
Cybersecurity & Data Protection Assessment Standards (CDPAS)
-
(Included in full purchase)
Cybersecurity & Data Protection Assessment Standards (CDPAS)
-
(Included in full purchase)
SCF CAP Assessment Rigor
-
(Included in full purchase)
End Of Chapter Review
-
(Included in full purchase)
-
10
Designing Controls To Meet Assessment Rigor
-
(Included in full purchase)
SCF CAP Assessment Rigor Overview
-
(Included in full purchase)
SCF CAP Sampling Guidance
-
(Included in full purchase)
End Of Chapter Review
-
(Included in full purchase)
-
11
Overview - Leveraging SCF Connect
-
(Included in full purchase)
SCF Connect Overview
-
(Included in full purchase)
Initiate An SCF CAP Assessment
-
(Included in full purchase)
Provision OSA User Accounts
-
(Included in full purchase)
Collect Required Assessment Evidence Using The SCF ERL
-
(Included in full purchase)
Conduct An SCF CAP Assessment
-
(Included in full purchase)
Assess Evidence Of Control Implementation
-
(Included in full purchase)
Generate SCF CAP Report On Conformity (RoC) Assessment Reports
-
(Included in full purchase)
End Of Chapter Review
-
(Included in full purchase)
-
12
SCF Architect Knowledge Exam
-
(Included in full purchase)
SCF Architect Knowledge Exam
-
(Included in full purchase)