Sekit CSF · Privacy · Policy
RCF-0370Cross-border transfers
The company has a formal policy governing how personal data is transferred to other countries
Mapping at a glance
RCF-0370Cross-border transfersPrivacy · Policy
A.5.14Information transferISO/IEC 27001:2022A.5.34Privacy and protection of personal identifiable information (PII)ISO/IEC 27001:2022GV.OC-03Legal and regulatory requirements understoodNIST CSF 2.0GV.SC-05Supply chain requirements in contractsNIST CSF 2.0GV.SC-06Due diligence before engagementNIST CSF 2.0
RCF-0370 maps to 5 controls across the published frameworks. Open in the full graph →
Maps to ISO/IEC 27001:2022
Curated mapping with the reasoning, not just the codes.
A.5.14Information transferrelatedCross-border transfer rules address the legal basis for moving personal data outside the EEA, a related concern to A.5.14's channel security but governed by a different set of safeguards.A.5.34Privacy and protection of personal identifiable information (PII)supportsA written rule set stating when data may leave the EEA and which safeguard applies extends this control's obligations to international transfers.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
GV.OC-03Legal and regulatory requirements understoodGV.SC-05Supply chain requirements in contractsGV.SC-06Due diligence before engagement
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
DPIA and cross-border transfer records
The privacy impact assessments done before new data processing and the records of personal-data transfers to other countries.
From the Sekit evidence catalog
This topic through the other lenses
All Privacy controls
Ask Sekura: “What evidence proves RCF-0370?”
Also via MCP, free with account