The Unified Compliance Framework (UCF) represents original research by Network Frontiers LLC and the international law firm of Latham & Watkins LLP, together with input from our field editors worldwide. The UCF was developed to answer several questions: 1) can the organization's existing controls be used for attestation under multiple regulatory initiatives? 2) Which regulatory initiatives overlap the others? 3) Which regulatory initiatives fill the gaps left by others? In order to answer these questions, thorough and in-depth research into the technical as well as legal interpretations of each authority document in question had to be undertaken. Therefore, both Network Frontiers and Latham & Watkins have developed a solid research methodology, cross referencing methodology, glossary methodology, fact checking methodology, and editorial methodology to maintain the high standards enjoyed by the vendors and end users of the Unified Compliance Framework.
In addition, the UCF team strives to work directly with as many of the rule makers as possible, to ensure that their original intentions for the authority documents they created are transferred and translated correctly within the UCF.
From time to time, as with the creating and editing of the Say What You Do book regarding IT policies, standards, and procedures, the UCF team reaches out to known industry experts for their guidance and input.
And all along the way the UCF team strives to ensure that our material is grounded in the real world. To that end, we reach out to Field Editors across the globe and ask them for their input. If you would like to become one of those field editors, please contact us using the Field Editor Sign up form.