Sekit CSF · Asset Management · Policy
RCF-0052Criticality tagging
All assets are formally required to be rated by their importance to business operations
Mapping at a glance
RCF-0052Criticality taggingAsset Management · Policy
RCF-0052 maps to 4 controls across the published frameworks. Open in the full graph →
Maps to ISO/IEC 27001:2022
Curated mapping with the reasoning, not just the codes.
A.5.9Inventory of information and other associated assetssupportsThis policy control requires every asset to receive a business-criticality rating on a defined scale, an attribute A.5.9 expects the asset inventory to carry.A.5.12Classification of informationrelatedCriticality tagging rates assets by business importance, a related but distinct dimension from A.5.12's sensitivity classification; the two schemes often sit side by side on the same asset register.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Hardware asset inventory
The list of all the company's physical devices (computers, laptops, servers, phones, network gear) with who uses them and where they are.
From the Sekit evidence catalog
This topic through the other lenses
All Asset Management controls
Ask Sekura: “What evidence proves RCF-0052?”
Also via MCP, free with account