How it Works?

scf common controls & evidence management solution is composed of three turbine applications which work together to provide a robust inventory of compliance controls, records to organize and review compliance audit evidence, and a reporting module to track audit progress over time and export evidence in alignment with specific compliance frameworks (iso27002, gdpr, pci dss, and so on) the unified control catalog is imported from the secure controls framework (read about the scf here) which streamlines control mappings by offering framework agnostic control descriptions