Cybersecurity Assessment Standard

Cybersecurity & Data Protection Assessment Standards (CDPAS)

The Cybersecurity & Data Protection Assessment Standards (CDPAS) is a refreshing look at how to perform third-party cybersecurity assesments. The CDPAS is a cohesive, consistent set of standards to govern cybersecurity and data protection related Third Party Assessment, Attestation and Certification Services (3PAAC Services). The CDPAS provides performance standards to normalize 3PAAC Services.

By following the CDPAS methodology, cybersecurity and data privacy practitioners can improve the currently disjointed approach used to perform assessments of cybersecurity and/or data privacy controls.

The SCF took on an ambitious project to “build a better mousetrap” to fix the common complaints associated with audits/assessments. The release of the CDPAS empowers organizations to develop cybersecurity and data protection assessment strategies tailored to their specific mission and business needs, threats and operational environments. This is a free resource for business to use.