LogicGate utilizes the SCF to define how we map controls between the standards and regulations which are included as part of our core content repository.

• LogicGate's flexible data mapping capabilities allow users to easily view relationships between these controls, as well as between other critical data objects, such as risks, assessments, evidence, policies, and assets. Through these relationships, risk teams can perform an assessment on one control framework and then easily determine the compliance status of a mapped control framework, helping to reduce the amount of time and effort spent by teams needing to ask for the same evidence or attestations over time.
• The database technology that LogicGate is built on also enables organizations to easily adjust relationships between controls and other items as regulatory requirements and standards change.

Ostendio's My Virtual Compliance Manager (MyVCM) is a cloud-based GRC/IRM platform that:

• Helps organizations understand what they need to do to build their security and risk management program;
• Operates the program across the entire organization on a day by day basis; and
• Makes it simple to demonstrate compliance across over 100 laws, regulations and industry standards, ensuring the organization is always audit ready. 
• Fully integrates the SCF's controls and allows organizations to easily compare their security program against over 100 security and privacy frameworks by simply mapping the controls necessary for any additional standard or regulation:
• Everyone in the company can log in and use the platform, which makes MyVCM's licensing model the most cost-effective GRC/IRM solution for multiple-user involvement.
• It offers a "single-pane-of-glass" reporting, automated workflow management, and integration with some of the world’s leading platforms including OneLogin, Microsoft and Google. 

SimpleRisk is a free and open source GRC tool that leverages the SCF, giving our customers what they've been asking for - an easy way to load up and utilize controls for various compliance frameworks. 

• The SCF is a free downloadable "extra" within SimpleRisk.  Customers can go to the Configure > Register & Upgrade menu in any registered SimpleRisk instance and click "Download" to download and then install the SCF in that instance. 
• Within SimpleRisk, clients are presented with a list of the frameworks represented with the SCF and the option to select which ones apply to their organization.  Applicable controls are automatically imported into the Governance functionality of SimpleRisk with mappings to their associated frameworks.  From there, customers can document exceptions, perform testing, and use the controls to plan mitigations for their risks.