Sekit CSFISO/IEC 27001:2022 · Annex A controls

Every topic through three lenses: policy, process, technical. Pick a family, then click any control to light up its mappings.

432 controls · 20 families · 2214 mapped pairs

Frameworks

Family

Lens

Sekit CSF · Governance & Risk

/Governance & Risk

ISO/IEC 27001:2022 · Annex A controls

Sekit CSF · Governance & Risk · Process

RCF-0011Risk treatment

Risk treatment actions are tracked and completed within agreed timelines

ISO/IEC 27001:2022 · Annex A controls

Tracking agreed risk actions to completion is a general governance discipline that also applies to the corrective actions a response generates, though its main scope is risk treatment, not incident response.

This process control tracks agreed risk actions to completion within their deadlines, the follow-through A.5.36 expects after a treatment decision is made.

This topic through the other lenses

Ask Sekura: “What evidence proves RCF-0011?”

Connect your AI · free MCP

https://sekit.ai/api/mcp/crosswalk

In Claude or ChatGPT, add a custom connector and paste this URL.
Sign in with your email to finish. Free, read-only, no organization required.

Sekit

Sekit · The GRC platform for consultancies, companies and their agents.

Product

AI-native platform
Gap analysis
Risks
Evidence
Framework crosswalk
Start free trial
Sign in

Company

Free EU AI Act check
EU AI Act
About
Contact

Legal

Privacy
Terms
Cookies

Sekit CSF (in development) · curated mapping, not audit guidance.

Free with a Sekit account · MCP & CLI access included

NIST CSF 2.0 content is courtesy of the U.S. National Institute of Standards and Technology. NIST does not endorse this tool.