Sekit CSF · Family
Secure Operations
18 controls in 6 topics, each seen through the policy, process and technical lenses.
Policy
RCF-0409Availability management4 mappingsAvailability targets are formally defined for all critical services based on business requirementsRCF-0412Capacity & performance mgmt4 mappingsThe company formally plans for the capacity needed to meet current and future service demandRCF-0400Change management5 mappingsAll changes to production systems are formally required to be reviewed and approved before implementationRCF-0415Problem management5 mappingsRecurring incidents and underlying root causes are formally investigated and tracked to prevent recurrenceRCF-0403Release management6 mappingsThe company formally governs how software and configuration updates are released into productionRCF-0406SRE/Resilience practices5 mappingsThe company formally applies site reliability engineering practices to maintain and improve service resilience
Process
RCF-0410Availability management4 mappingsService availability is consistently monitored and availability incidents are tracked and reportedRCF-0413Capacity & performance mgmt4 mappingsCapacity and performance are consistently monitored and resource constraints are addressed before they cause outagesRCF-0401Change management6 mappingsChanges are consistently submitted, reviewed and approved through the change management processRCF-0416Problem management5 mappingsKnown problems are consistently tracked, prioritised and resolved to reduce the frequency of related incidentsRCF-0404Release management7 mappingsReleases are consistently tested, approved and deployed through a controlled release processRCF-0407SRE/Resilience practices5 mappingsReliability targets and error budgets are consistently tracked and drive decisions about feature work versus stability
Technical
RCF-0411Availability management5 mappingsTechnical monitoring tools track uptime against availability targets and alert when services degrade or failRCF-0414Capacity & performance mgmt4 mappingsTechnical tools monitor resource utilisation, forecast capacity needs and trigger scaling when thresholds are reachedRCF-0402Change management4 mappingsTechnical tools enforce the change management workflow and block unauthorised changes to production environmentsRCF-0417Problem management6 mappingsTechnical tools identify patterns across incident records and support structured root cause analysisRCF-0405Release management5 mappingsTechnical tools automate controlled deployments and provide rollback capability if releases cause issuesRCF-0408SRE/Resilience practices6 mappingsTechnical tools monitor service level indicators and automatically trigger resilience actions when thresholds are breached
This family in ISO/IEC 27001:2022
Every framework item the family's controls map to, most-connected first — grouped by Sekit CSF family, never by the framework's own index.
This family in NIST CSF 2.0
This family in ISO/IEC 42001:2023 — Annex A
This family in Cyber Essentials
Ask Sekura: “What evidence proves Secure Operations?”
Also via MCP, free with account