Sekit CSF · Endpoint Security · Process
RCF-0146Configuration baselines
Devices are consistently configured to the approved baseline when deployed and after significant changes
Mapping at a glance
RCF-0146Configuration baselinesEndpoint Security · Process
RCF-0146 maps to 7 controls across the published frameworks. +2 more in the table below. Open in the full graph →
Maps to ISO/IEC 27001:2022
Curated mapping with the reasoning, not just the codes.
A.8.1User endpoint devicessupportsThe configuration baseline process facet applies the approved device settings at deployment and after significant changes, keeping A.8.1's hardening requirement current over time.A.8.9Configuration managementsupportsApplying the approved baseline at deployment and re-checking after significant changes is the process leg A.8.9 needs alongside the written standard.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
Maps to Cyber Essentials
Curated mapping with the reasoning, not just the codes.
CE2.1Remove unnecessary accounts and softwareCE2.2Change default and guessable passwordsCE2.3Enforce device unlocking credentials
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Device hardening baseline
The secure-configuration standard applied to devices when handed out (default settings, disabled services) and how compliance is checked.
From the Sekit evidence catalog
This topic through the other lenses
All Endpoint Security controls
Ask Sekura: “What evidence proves RCF-0146?”
Also via MCP, free with account