Sekit CSF · Identity & Access Management · Technical
RCF-0081Session management
Screen locks and session timeouts are technically enforced on all devices
Mapping at a glance
RCF-0081Session managementIdentity & Access Management · Technical
RCF-0081 maps to 6 controls across the published frameworks. +1 more in the table below. Open in the full graph →
Maps to ISO/IEC 27001:2022
Curated mapping with the reasoning, not just the codes.
A.8.1User endpoint devicessupportsThe session management technical facet enforces automatic screen lock and timeout on every device through central configuration, one control A.8.1 expects on user endpoints.A.8.5Secure authenticationsupportsAutomatic screen lock and session timeout are enforced centrally on every device, protecting an already-authenticated session the way A.8.5 expects.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
PR.AA-01Identities and credentials managedPR.AA-02Identities proofed and boundPR.AA-05Access permissions managed
Maps to Cyber Essentials
Curated mapping with the reasoning, not just the codes.
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Password policy and manager
The company's password rules (length, complexity, expiry) and whether a password manager is used, plus how they are technically enforced.
From the Sekit evidence catalog
This topic through the other lenses
All Identity & Access Management controls
Ask Sekura: “What evidence proves RCF-0081?”
Also via MCP, free with account