SekitCrosswalk
ENES
Start now
Sekit CSF · Vulnerability & Configuration · Technical

RCF-0222Vulnerability remediation SLAs

Technical tools track vulnerability age against defined SLAs and automatically escalate overdue items

Mapping at a glance
RCF-0222Vulnerability remediation SLAsVulnerability & Configuration · Technical
A.8.8Management of technical vulnerabilitiesISO/IEC 27001:2022ID.IM-02Improvements from tests and exercisesNIST CSF 2.0ID.RA-05Inherent risk understoodNIST CSF 2.0ID.RA-07Changes and exceptions managedNIST CSF 2.0

RCF-0222 maps to 4 controls across the published frameworks. Open in the full graph →

Maps to ISO/IEC 27001:2022

Curated mapping with the reasoning, not just the codes.

A.8.8Management of technical vulnerabilitiessupportsThe technical facet computes vulnerability age against the deadline table automatically and notifies owners as items approach or pass due dates.

Maps to NIST CSF 2.0

Curated mapping with the reasoning, not just the codes.

ID.IM-02Improvements from tests and exercisesID.RA-05Inherent risk understoodID.RA-07Changes and exceptions managed

Evidence that proves this control

What an auditor, or Sekit's evidence engine, asks for.

Patch management report
The proof that security updates are applied on time across devices and systems, with tracking of what is still outstanding.
From the Sekit evidence catalog

This topic through the other lenses

RCF-0220 PolicyRCF-0221 Process

All Vulnerability & Configuration controls

Vulnerability & Configuration
Ask Sekura: “What evidence proves RCF-0222?”
Also via MCP, free with account