Sekit CSF · Supply Chain Security · Process
RCF-0323Ongoing monitoring
Supplier security is consistently reviewed through periodic assessments and real-time intelligence
Mapping at a glance
RCF-0323Ongoing monitoringSupply Chain Security · Process
A.5.7Threat intelligenceISO/IEC 27001:2022 · Annex A controlsA.5.22Monitoring, review and change management of supplier servicesISO/IEC 27001:2022 · Annex A controlsDE.CM-06External provider activity monitoredNIST CSF 2.0GV.SC-04Suppliers known and prioritizedNIST CSF 2.0GV.SC-06Due diligence before engagementNIST CSF 2.0
RCF-0323 maps to 7 controls across the published frameworks. +2 more in the table below. Open in the full graph →
Maps to ISO/IEC 27001:2022 · Annex A controls
Curated mapping with the reasoning, not just the codes.
A.5.7Threat intelligencesupportsThis process control runs periodic supplier reviews and watches breach signals for critical providers, extending threat intelligence to the supply chain A.5.7 also covers.A.5.22Monitoring, review and change management of supplier servicessupportsRunning periodic supplier reviews and watching breach signals for critical providers supports A.5.22's monitoring and review requirement, while the change management half of the control sits with RCF-0353.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
DE.CM-06External provider activity monitoredGV.SC-04Suppliers known and prioritizedGV.SC-06Due diligence before engagementGV.SC-07Supplier risk managed over relationship
Maps to ISO/IEC 42001:2023 — Annex A
Curated mapping with the reasoning, not just the codes.
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Vendor due diligence and monitoring
How the company assesses a supplier's security before hiring and monitors it during the relationship, including the process when it ends.
From the Sekit evidence catalog
This topic through the other lenses
All Supply Chain Security controls
Ask Sekura: “What evidence proves RCF-0323?”
Connect your AI · free MCP
https://sekit.ai/api/mcp/crosswalk- In Claude or ChatGPT, add a custom connector and paste this URL.
- Sign in with your email to finish. Free, read-only, no organization required.