Crosswalk de marcos Sekit CSFISO/IEC 27001:2022 Cada tema a través de tres lentes: política, proceso y técnica. Elige una familia y haz clic en cualquier control para iluminar sus mapeos.
432 controles · 20 familias · 2214 pares mapeados
Sekit CSF · Vulnerability & Configuration Crosswalk / Vulnerability & Configuration RCF-0217 Política 2 mapeados Vulnerability scanning ISO 27001 A.5.1 ISO 27001 A.8.8 RCF-0218 Proceso 2 mapeados Vulnerability scanning ISO 27001 A.5.37 ISO 27001 A.8.8 RCF-0219 Técnica 1 mapeados Vulnerability scanning ISO 27001 A.8.8 RCF-0220 Política 2 mapeados Vulnerability remediation SLAs ISO 27001 A.5.1 ISO 27001 A.8.8 RCF-0221 Proceso 2 mapeados Vulnerability remediation SLAs ISO 27001 A.5.37 ISO 27001 A.8.8 RCF-0222 Técnica 1 mapeados Vulnerability remediation SLAs ISO 27001 A.8.8 RCF-0223 Política 2 mapeados Configuration management ISO 27001 A.5.1 ISO 27001 A.8.9 RCF-0224 Proceso 2 mapeados Configuration management ISO 27001 A.5.36 ISO 27001 A.8.9 RCF-0225 Técnica 1 mapeados Configuration management ISO 27001 A.8.9 RCF-0226 Política 2 mapeados Baseline compliance ISO 27001 A.5.1 ISO 27001 A.8.9 RCF-0227 Proceso 2 mapeados Baseline compliance ISO 27001 A.5.36 ISO 27001 A.8.9 RCF-0228 Técnica 1 mapeados Baseline compliance ISO 27001 A.8.9 RCF-0229 Política 2 mapeados Patch prioritization ISO 27001 A.5.1 ISO 27001 A.8.8 RCF-0230 Proceso 2 mapeados Patch prioritization ISO 27001 A.5.37 ISO 27001 A.8.8 RCF-0231 Técnica 2 mapeados Patch prioritization ISO 27001 A.5.7 ISO 27001 A.8.8 RCF-0232 Política 2 mapeados Exposure management ISO 27001 A.5.1 ISO 27001 A.8.8 RCF-0233 Proceso 2 mapeados Exposure management ISO 27001 A.5.9 ISO 27001 A.8.8 RCF-0234 Técnica 2 mapeados Exposure management ISO 27001 A.8.16 ISO 27001 A.8.8 RCF-0235 Política 2 mapeados Penetration testing ISO 27001 A.5.1 ISO 27001 A.8.8 RCF-0236 Proceso 2 mapeados Penetration testing ISO 27001 A.8.34 ISO 27001 A.8.8 RCF-0237 Técnica 2 mapeados Penetration testing ISO 27001 A.8.31 ISO 27001 A.8.34
ISO/IEC 27001:2022 A.5.1 Policies for information security A.5.7 Threat intelligence A.5.9 Inventory of information and other associated assets A.5.36 Compliance with policies, rules and standards for information security A.5.37 Documented operating procedures A.8.8 Management of technical vulnerabilities A.8.9 Configuration management A.8.16 Monitoring activities A.8.31 Separation of development, test and production environments A.8.34 Protection of information systems during audit testing