Sekit CSF · Governance & Risk · Process
RCF-0017Regulatory compliance
Regulatory requirements are consistently implemented across the organisation
Mapping at a glance
RCF-0017Regulatory complianceGovernance & Risk · Process
A.5.4Management responsibilitiesISO/IEC 27001:2022 · Annex A controlsA.5.31Legal, statutory, regulatory and contractual requirementsISO/IEC 27001:2022 · Annex A controlsA.5.36Compliance with policies, rules and standards for information securityISO/IEC 27001:2022 · Annex A controlsGV.OC-01Organizational mission understoodNIST CSF 2.0GV.OC-02Stakeholder needs understoodNIST CSF 2.0
RCF-0017 maps to 8 controls across the published frameworks. +3 more in the table below. Open in the full graph →
Maps to ISO/IEC 27001:2022 · Annex A controls
Curated mapping with the reasoning, not just the codes.
A.5.4Management responsibilitiessupportsThis process control carries out each legal obligation's recurring activities consistently across the company, the operational proof that managers are enforcing policy company-wide.A.5.31Legal, statutory, regulatory and contractual requirementssupportsCarrying out the recurring activities each legal obligation demands, consistently and on schedule, is how the register in this control gets acted on rather than filed and forgotten.A.5.36Compliance with policies, rules and standards for information securitysupportsThis process control carries out each legal obligation's recurring activities consistently across the company, the compliance behaviour A.5.36 verifies is genuinely happening.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
GV.OC-01Organizational mission understoodGV.OC-02Stakeholder needs understoodGV.OC-03Legal and regulatory requirements understoodGV.OC-04Critical objectives and services understoodGV.OC-05Dependencies understood
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Regulatory obligations register
The list of laws, regulations and frameworks that apply to the company (e.g. GDPR, sector rules) and how they map to your internal controls.
From the Sekit evidence catalog
This topic through the other lenses
All Governance & Risk controls
Ask Sekura: “What evidence proves RCF-0017?”
Connect your AI · free MCP
https://sekit.ai/api/mcp/crosswalk- In Claude or ChatGPT, add a custom connector and paste this URL.
- Sign in with your email to finish. Free, read-only, no organization required.