Sekit CSF · Vulnerability & Configuration · Policy

RCF-0217Vulnerability scanning

The company formally requires regular scanning of all systems to identify known security vulnerabilities

Mapping at a glance

RCF-0217Vulnerability scanningVulnerability & Configuration · Policy

A.5.1Policies for information securityISO/IEC 27001:2022 A.8.8Management of technical vulnerabilitiesISO/IEC 27001:2022 ID.RA-01Vulnerabilities identified and recordedNIST CSF 2.0 ID.RA-05Inherent risk understoodNIST CSF 2.0

RCF-0217 maps to 4 controls across the published frameworks. Open in the full graph →

Maps to ISO/IEC 27001:2022

Curated mapping with the reasoning, not just the codes.

A.5.1Policies for information securitysupportsSekit's Vulnerability scanning policy, one of A.5.1's topic-specific policies, requires every server, workstation and externally reachable service to be scanned for known vulnerabilities on a defined schedule.A.8.8Management of technical vulnerabilitiessupportsThis policy facet requires every server, workstation and externally reachable service to be scanned on a defined schedule, matching A.8.8's core scanning requirement.

Maps to NIST CSF 2.0

Curated mapping with the reasoning, not just the codes.

ID.RA-01Vulnerabilities identified and recorded ID.RA-05Inherent risk understood

This topic through the other lenses

All Vulnerability & Configuration controls

Ask Sekura: “What evidence proves RCF-0217?”

Also via MCP, free with account