SekitCrosswalk
ENES
Start now
Sekit CSF · Identity & Access Management · Process

RCF-0086Access reviews (recertification)

Managers regularly confirm their team has the correct level of access

Mapping at a glance
RCF-0086Access reviews (recertification)Identity & Access Management · Process
A.5.18Access rightsISO/IEC 27001:2022PR.AA-03Users and devices authenticatedNIST CSF 2.0PR.AA-05Access permissions managedNIST CSF 2.0CE4.1Manage the account lifecycleCyber EssentialsCE4.2Control administrative privilegesCyber Essentials

RCF-0086 maps to 5 controls across the published frameworks. Open in the full graph →

Maps to ISO/IEC 27001:2022

Curated mapping with the reasoning, not just the codes.

A.5.18Access rightssupportsManagers confirming access against current duties, with IT removing what is flagged inside the agreed deadline, is what makes the access review requirement real rather than a calendar entry.

Maps to NIST CSF 2.0

Curated mapping with the reasoning, not just the codes.

PR.AA-03Users and devices authenticatedPR.AA-05Access permissions managed

Maps to Cyber Essentials

Curated mapping with the reasoning, not just the codes.

CE4.1Manage the account lifecycleCE4.2Control administrative privileges

This topic through the other lenses

RCF-0085 PolicyRCF-0087 Technical

All Identity & Access Management controls

Identity & Access Management
Ask Sekura: “What evidence proves RCF-0086?”
Also via MCP, free with account