SekitCrosswalk
ENES
Start now
Sekit CSF · Logging & Monitoring · Technical

RCF-0210Log protection & retention

Technical controls write logs to tamper-evident storage and enforce retention periods automatically

Mapping at a glance
RCF-0210Log protection & retentionLogging & Monitoring · Technical
A.8.15LoggingISO/IEC 27001:2022DE.CM-03Personnel activity monitoredNIST CSF 2.0PR.DS-01Data-at-rest protectedNIST CSF 2.0

RCF-0210 maps to 3 controls across the published frameworks. Open in the full graph →

Maps to ISO/IEC 27001:2022

Curated mapping with the reasoning, not just the codes.

A.8.15LoggingsupportsWriting logs to storage ordinary admin accounts cannot alter and enforcing retention automatically covers the protection half of A.8.15, which also requires producing and storing the events in the first place.

Maps to NIST CSF 2.0

Curated mapping with the reasoning, not just the codes.

DE.CM-03Personnel activity monitoredPR.DS-01Data-at-rest protected

Evidence that proves this control

What an auditor, or Sekit's evidence engine, asks for.

Logging and monitoring configuration
How the company collects and keeps activity logs from its systems, and how security alerts are generated and handled.
From the Sekit evidence catalog

This topic through the other lenses

RCF-0208 PolicyRCF-0209 Process

All Logging & Monitoring controls

Logging & Monitoring
Ask Sekura: “What evidence proves RCF-0210?”
Also via MCP, free with account