Sekit CSF · Incident Response · Policy
RCF-0262Roles & communications
Security roles and responsibilities during an incident are formally defined and documented
Mapping at a glance
RCF-0262Roles & communicationsIncident Response · Policy
A.5.2Information security roles and responsibilitiesISO/IEC 27001:2022A.5.24Information security incident management planning and preparationISO/IEC 27001:2022RS.CO-02Stakeholders notifiedNIST CSF 2.0RS.MA-01Incident response plan executedNIST CSF 2.0A.8.4Communication of incidentsISO/IEC 42001:2023 — Annex A
RCF-0262 maps to 5 controls across the published frameworks. Open in the full graph →
Maps to ISO/IEC 27001:2022
Curated mapping with the reasoning, not just the codes.
A.5.2Information security roles and responsibilitiessupportsIncident roles, decision authority and deputies are role assignments for a specific scenario, an instance of the same accountability mapping A.5.2 requires across the security programme.A.5.24Information security incident management planning and preparationsupportsDocumenting who decides, who deputises and who contacts external parties gives the incident plan the named roles this control requires as part of preparation.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
Maps to ISO/IEC 42001:2023 — Annex A
Curated mapping with the reasoning, not just the codes.
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Incident response plan
The plan defining how the company acts when a security incident occurs: who does what, who is notified, and within what timeframes.
From the Sekit evidence catalog
This topic through the other lenses
All Incident Response controls
Ask Sekura: “What evidence proves RCF-0262?”
Also via MCP, free with account