Sekit CSF · Vulnerability & Configuration · Process
RCF-0224Configuration management
System configurations are consistently reviewed against approved standards and deviations are corrected
Mapping at a glance
RCF-0224Configuration managementVulnerability & Configuration · Process
RCF-0224 maps to 6 controls across the published frameworks. +1 more in the table below. Open in the full graph →
Maps to ISO/IEC 27001:2022
Curated mapping with the reasoning, not just the codes.
A.5.36Compliance with policies, rules and standards for information securitysupportsThis process control reviews deployed configurations against approved standards on a recurring basis and corrects deviations found, a direct instance of the compliance checking A.5.36 requires.A.8.9Configuration managementsupportsReviewing deployed configurations against the approved standards on a recurring basis and correcting deviations is the process leg A.8.9 explicitly asks for.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
Maps to Cyber Essentials
Curated mapping with the reasoning, not just the codes.
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Device hardening baseline
The secure-configuration standard applied to devices when handed out (default settings, disabled services) and how compliance is checked.
From the Sekit evidence catalog
This topic through the other lenses
All Vulnerability & Configuration controls
Ask Sekura: “What evidence proves RCF-0224?”
Also via MCP, free with account