Sekit CSF · Supply Chain Security · Policy
RCF-0319Contractual security clauses
Security requirements are formally included in contracts with all suppliers who handle company data or access systems
Mapping at a glance
RCF-0319Contractual security clausesSupply Chain Security · Policy
RCF-0319 maps to 7 controls across the published frameworks. +2 more in the table below. Open in the full graph →
Maps to ISO/IEC 27001:2022
Curated mapping with the reasoning, not just the codes.
A.5.19Information security in supplier relationshipssupportsBinding security and data protection clauses in supplier contracts give A.5.19's risk requirements legal weight once the relationship is signed.A.5.20Addressing information security within supplier agreementsequivalentRequiring binding security and data protection clauses in every in-scope supplier contract is A.5.20's core requirement: write the expectations into the agreement itself.A.8.30Outsourced developmentsupportsThe Sekit policy requires binding security clauses in every supplier contract, holding an outsourced developer to the written standards this ISO control expects a company to apply.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
GV.SC-03Supply chain risk integratedGV.SC-04Suppliers known and prioritizedGV.SC-06Due diligence before engagement
Maps to ISO/IEC 42001:2023 — Annex A
Curated mapping with the reasoning, not just the codes.
This topic through the other lenses
All Supply Chain Security controls
Ask Sekura: “What evidence proves RCF-0319?”
Also via MCP, free with account