SCF Attribution & Licensing

Graphletter's compliance with Secure Controls Framework (SCF) licensing and attribution requirements

SCF Attribution Notice

SCF controls are used in this solution.

This work incorporates material from the Secure Controls Framework (SCF), which is licensed under the Creative Commons Attribution-NoDerivatives 4.0 International Public License.

Original Work: Secure Controls Framework (SCF)
Copyright: © 2019-2024 Secure Controls Framework Council
License: Creative Commons Attribution-NoDerivatives 4.0 International
Source: https://securecontrolsframework.com

Creative Commons License Details

The SCF is licensed under the Creative Commons Attribution-NoDerivatives 4.0 International Public License. Under this license, you are free to:

  • Share — copy and redistribute the material in any medium or format
  • Use commercially — use the material for commercial purposes

Under the following terms:

  • Attribution — You must give appropriate credit, provide a link to the license, and indicate if changes were made
  • NoDerivatives — If you remix, transform, or build upon the material, you may not distribute the modified material

View Full License Text

How Graphletter Uses SCF

Graphletter incorporates SCF controls and content in the following ways:

  • SCF control definitions, descriptions, and requirements are used for compliance assessment
  • SCF domain categorizations help organize and structure compliance frameworks
  • SCF control mappings enable cross-framework analysis and gap identification
  • Assessment objectives from SCF are used to evaluate evidence and compliance posture

No modifications: Graphletter uses SCF content as-is without creating derivative works, in compliance with the NoDerivatives clause of the CC BY-ND 4.0 license.

Commercial use: This usage is permitted under the license terms, which allow commercial use of the licensed material.

Disclaimer

This software is distributed "AS IS" without warranties or conditions of any kind, either express or implied. The Secure Controls Framework Council provides no warranty that the SCF content will meet your requirements or that the operation of the SCF will be uninterrupted or error-free.

Questions About SCF Usage

If you have questions about how Graphletter uses SCF content or about SCF licensing, please contact:

Graphletter Support: legal@graphletter.com

SCF Council: SCF Contact Information

Last updated: July 31, 2025