NIST CSF 2.0 · derived mapping target
GV.PO-01Cybersecurity policy established
Write a cybersecurity policy grounded in your context, strategy, and priorities, then communicate and enforce it. A policy nobody knows about protects nothing.
Mapping at a glance
GV.PO-01Cybersecurity policy establishedNIST CSF 2.0
GV.PO-01 is covered by 9 Sekit CSF controls. +4 more in the table below. Open in the full graph →
Mapped from the Sekit CSF
The Sekit controls that cover this requirement, lens by lens.
RCF-0001Policy management · PolicyRCF-0002Policy management · ProcessRCF-0003Policy management · TechnicalRCF-0028Security charter · PolicyRCF-0029Security charter · ProcessRCF-0030Security charter · TechnicalRCF-0142DevSecOps governance · PolicyRCF-0143DevSecOps governance · ProcessRCF-0144DevSecOps governance · Technical
ISO/IEC 27001:2022 · Annex A controls counterparts
Reached through the Sekit CSF controls both map to — a mapping, not a formal equivalence.
ISO/IEC 42001:2023 — Annex A counterparts
Cyber Essentials counterparts
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Information security policy
The written, leadership-approved document that sets the company's security rules: what is protected, how, and who is responsible.
From the Sekit evidence catalog
Related controls
Via the shared Sekit CSF topic, not the framework's own index.
Ask Sekura: “What evidence proves GV.PO-01?”
Connect your AI · free MCP
https://sekit.ai/api/mcp/crosswalk- In Claude or ChatGPT, add a custom connector and paste this URL.
- Sign in with your email to finish. Free, read-only, no organization required.