Sekit CSF · Asset Management · Policy
RCF-0049Ownership & custodians
Formal ownership and responsibility is assigned to all significant assets within the company
Mapping at a glance
RCF-0049Ownership & custodiansAsset Management · Policy
A.5.2Information security roles and responsibilitiesISO/IEC 27001:2022 · Annex A controlsA.5.9Inventory of information and other associated assetsISO/IEC 27001:2022 · Annex A controlsGV.RR-02Roles and responsibilities establishedNIST CSF 2.0ID.AM-02Software inventory maintainedNIST CSF 2.0ID.AM-05Assets prioritized by criticalityNIST CSF 2.0
RCF-0049 maps to 5 controls across the published frameworks. Open in the full graph →
Maps to ISO/IEC 27001:2022 · Annex A controls
Curated mapping with the reasoning, not just the codes.
A.5.2Information security roles and responsibilitiessupportsNaming an accountable owner for every system, dataset and device is a narrower application of A.5.2's requirement, mapping responsibility down to the asset level rather than the programme level.A.5.9Inventory of information and other associated assetssupportsThis policy control names an accountable owner for every significant asset in an approved document, giving A.5.9's inventory of information and assets the ownership attribute it requires alongside the inventory itself.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
GV.RR-02Roles and responsibilities establishedID.AM-02Software inventory maintainedID.AM-05Assets prioritized by criticality
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Hardware asset inventory
The list of all the company's physical devices (computers, laptops, servers, phones, network gear) with who uses them and where they are.
From the Sekit evidence catalog
This topic through the other lenses
All Asset Management controls
Ask Sekura: “What evidence proves RCF-0049?”
Connect your AI · free MCP
https://sekit.ai/api/mcp/crosswalk- In Claude or ChatGPT, add a custom connector and paste this URL.
- Sign in with your email to finish. Free, read-only, no organization required.