SekitCrosswalk
ENES
Start now
Sekit CSF · Compliance & Audit · Policy

RCF-0385Corrective action tracking

Audit findings and compliance gaps are formally tracked as corrective actions with assigned owners and deadlines

Mapping at a glance
RCF-0385Corrective action trackingCompliance & Audit · Policy
A.5.36Compliance with policies, rules and standards for information securityISO/IEC 27001:2022GV.RM-06Standardized risk method establishedNIST CSF 2.0GV.RM-07Strategic opportunities characterizedNIST CSF 2.0ID.IM-04Response and recovery plans maintainedNIST CSF 2.0

RCF-0385 maps to 4 controls across the published frameworks. Open in the full graph →

Maps to ISO/IEC 27001:2022

Curated mapping with the reasoning, not just the codes.

A.5.36Compliance with policies, rules and standards for information securityenablesThis policy control requires every audit finding or compliance gap to be logged with an owner, target date and closure criterion, the standard A.5.36's compliance checking enforces.

Maps to NIST CSF 2.0

Curated mapping with the reasoning, not just the codes.

GV.RM-06Standardized risk method establishedGV.RM-07Strategic opportunities characterizedID.IM-04Response and recovery plans maintained

Evidence that proves this control

What an auditor, or Sekit's evidence engine, asks for.

Audit evidence and corrective actions log
The file where proof that controls work is kept, plus the tracking of audit findings through to closure.
From the Sekit evidence catalog

This topic through the other lenses

RCF-0386 ProcessRCF-0387 Technical

All Compliance & Audit controls

Compliance & Audit
Ask Sekura: “What evidence proves RCF-0385?”
Also via MCP, free with account