Sekit CSF · Network Security · Technical
RCF-0189VPN management
Technical controls enforce authentication, encryption and access policy for all VPN connections
Mapping at a glance
RCF-0189VPN managementNetwork Security · Technical
RCF-0189 maps to 7 controls across the published frameworks. +2 more in the table below. Open in the full graph →
Maps to ISO/IEC 27001:2022
Curated mapping with the reasoning, not just the codes.
A.6.7Remote workingsupportsThis technical control requires MFA, current encryption and restricted internal reach on the VPN, the technical enforcement A.6.7 requires for remote connections.A.8.5Secure authenticationsupportsVPN access requires MFA, current protocols and encryption, applying A.8.5's authentication standard to the remote-access channel specifically.A.8.24Use of cryptographyrelatedThe VPN facet enforces MFA, current protocols and encryption on remote connections, adjacent to but narrower than A.8.24's full cryptography scope.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
Maps to Cyber Essentials
Curated mapping with the reasoning, not just the codes.
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
VPN and remote access configuration
How employees connect securely to company systems when working outside the office: VPN, remote-access rules and allowed devices.
From the Sekit evidence catalog
This topic through the other lenses
All Network Security controls
Ask Sekura: “What evidence proves RCF-0189?”
Also via MCP, free with account