Sekit CSF · Training & Awareness · Policy
RCF-0394Role-based training
Employees with elevated security responsibilities formally receive training tailored to their specific role
Mapping at a glance
RCF-0394Role-based trainingTraining & Awareness · Policy
A.6.3Information security awareness, education and trainingISO/IEC 27001:2022PR.AT-01General security awareness trainingNIST CSF 2.0PR.AT-02Role-based security trainingNIST CSF 2.0A.4.6Human resourcesISO/IEC 42001:2023 — Annex AA.9.2Processes for responsible use of AI systemsISO/IEC 42001:2023 — Annex A
RCF-0394 maps to 5 controls across the published frameworks. Open in the full graph →
Maps to ISO/IEC 27001:2022
Curated mapping with the reasoning, not just the codes.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
Maps to ISO/IEC 42001:2023 — Annex A
Curated mapping with the reasoning, not just the codes.
A.4.6Human resourcessupportsDefining elevated roles and their extra training is the right structure for naming an AI owner, but the policy as written is general security, not AI-specific.A.9.2Processes for responsible use of AI systemssupportsRCF-0394 requires elevated roles to get tailored training, the right structure for staff who operate or oversee an AI system, but the current role list was defined before AI oversight became a distinct responsibility.
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Security awareness training records
The proof that employees receive regular security training and complete it, including role-specific training.
From the Sekit evidence catalog
This topic through the other lenses
All Training & Awareness controls
Ask Sekura: “What evidence proves RCF-0394?”
Also via MCP, free with account