Are there any documents available to help me prepare for my Security / Privacy Assessment?

For both Security and Privacy assessments, we strongly recommend reading the Security Controls Framework (SCF) and/or Privacy Controls Framework (PCF). Both frameworks provide the basis for enabling a consistent level of review across all Users, and indicate the type of evidence which could be provided by a User to demonstrate compliance with its obligations. These should be used in addition to the SEC itself.

Please find direct links to the latest versions of the Controls Frameworks below which can be accessed once you have logged in:

• SCF Part 1 – User Assessment Methodology Latest Version
• SCF Part 2 – User Assessment Guidance Latest Version
• Privacy Controls Framework (PCF) Latest Version