Crosswalk de marcos Sekit CSF2 marcos Cada tema a través de tres lentes: política, proceso y técnica. Elige una familia y haz clic en cualquier control para iluminar sus mapeos.
432 controles · 20 familias · 2214 pares mapeados
Sekit CSF · Identity & Access Management Crosswalk / Identity & Access Management RCF-0061 Política 3 mapeados Identity lifecycle ISO 27001 A.5.15 ISO 27001 A.5.16 Cyber Ess. CE4.1 RCF-0062 Proceso 3 mapeados Identity lifecycle ISO 27001 A.5.16 ISO 27001 A.5.18 Cyber Ess. CE4.1 RCF-0063 Técnica 3 mapeados Identity lifecycle ISO 27001 A.5.16 ISO 27001 A.5.18 Cyber Ess. CE4.1 RCF-0064 Política 5 mapeados Strong authentication (MFA) ISO 27001 A.5.15 ISO 27001 A.5.17 ISO 27001 A.8.5 Cyber Ess. CE4.3 Cyber Ess. CE4.4 RCF-0065 Proceso 3 mapeados Strong authentication (MFA) ISO 27001 A.5.17 ISO 27001 A.8.5 Cyber Ess. CE4.3 RCF-0066 Técnica 3 mapeados Strong authentication (MFA) ISO 27001 A.8.5 Cyber Ess. CE4.3 Cyber Ess. CE4.4 RCF-0067 Política 4 mapeados Least privilege / RBAC ISO 27001 A.5.15 ISO 27001 A.5.18 ISO 27001 A.8.3 Cyber Ess. CE4.2 RCF-0068 Proceso 3 mapeados Least privilege / RBAC ISO 27001 A.5.18 Cyber Ess. CE4.1 Cyber Ess. CE4.2 RCF-0069 Técnica 3 mapeados Least privilege / RBAC ISO 27001 A.5.15 ISO 27001 A.8.3 Cyber Ess. CE4.2 RCF-0070 Política 3 mapeados Privileged access management ISO 27001 A.5.15 ISO 27001 A.8.2 Cyber Ess. CE4.2 RCF-0071 Proceso 4 mapeados Privileged access management ISO 27001 A.8.15 ISO 27001 A.8.18 ISO 27001 A.8.2 Cyber Ess. CE4.2 RCF-0072 Técnica 6 mapeados Privileged access management ISO 27001 A.8.15 ISO 27001 A.8.16 ISO 27001 A.8.18 ISO 27001 A.8.2 Cyber Ess. CE4.2 Cyber Ess. CE4.3 RCF-0073 Política 3 mapeados SSO & federation ISO 27001 A.5.1 ISO 27001 A.5.15 ISO 27001 A.5.16 RCF-0074 Proceso 3 mapeados SSO & federation ISO 27001 A.5.15 ISO 27001 A.5.16 ISO 27001 A.5.8 RCF-0075 Técnica 4 mapeados SSO & federation ISO 27001 A.5.15 ISO 27001 A.5.16 ISO 27001 A.8.5 Cyber Ess. CE4.3 RCF-0076 Política 4 mapeados Password policy ISO 27001 A.5.1 ISO 27001 A.5.17 Cyber Ess. CE2.2 Cyber Ess. CE4.4 RCF-0077 Proceso 3 mapeados Password policy ISO 27001 A.5.17 ISO 27001 A.6.3 Cyber Ess. CE4.4 RCF-0078 Técnica 4 mapeados Password policy ISO 27001 A.5.17 ISO 27001 A.8.5 Cyber Ess. CE2.3 Cyber Ess. CE4.4 RCF-0079 Política 3 mapeados Session management ISO 27001 A.5.15 ISO 27001 A.5.17 Cyber Ess. CE2.3 RCF-0080 Proceso 3 mapeados Session management ISO 27001 A.5.10 ISO 27001 A.7.7 Cyber Ess. CE2.3 RCF-0081 Técnica 3 mapeados Session management ISO 27001 A.8.1 ISO 27001 A.8.5 Cyber Ess. CE2.3 RCF-0082 Política 4 mapeados Remote access ISO 27001 A.5.15 ISO 27001 A.6.7 Cyber Ess. CE1.2 Cyber Ess. CE4.3 RCF-0083 Proceso 3 mapeados Remote access ISO 27001 A.6.3 ISO 27001 A.6.7 Cyber Ess. CE4.3 RCF-0084 Técnica 6 mapeados Remote access ISO 27001 A.6.7 ISO 27001 A.8.20 ISO 27001 A.8.24 ISO 27001 A.8.5 Cyber Ess. CE1.2 Cyber Ess. CE4.3 RCF-0085 Política 4 mapeados Access reviews (recertification) ISO 27001 A.5.15 ISO 27001 A.5.18 Cyber Ess. CE4.1 Cyber Ess. CE4.2 RCF-0086 Proceso 3 mapeados Access reviews (recertification) ISO 27001 A.5.18 Cyber Ess. CE4.1 Cyber Ess. CE4.2 RCF-0087 Técnica 3 mapeados Access reviews (recertification) ISO 27001 A.5.18 ISO 27001 A.8.15 ISO 27001 A.8.16 RCF-0088 Política 4 mapeados JML (joiner-mover-leaver) ISO 27001 A.5.16 ISO 27001 A.5.18 ISO 27001 A.6.5 Cyber Ess. CE4.1 RCF-0089 Proceso 3 mapeados JML (joiner-mover-leaver) ISO 27001 A.5.18 ISO 27001 A.6.5 Cyber Ess. CE4.1 RCF-0090 Técnica 3 mapeados JML (joiner-mover-leaver) ISO 27001 A.5.16 ISO 27001 A.5.18 Cyber Ess. CE4.1
ISO/IEC 27001:2022 A.5.1 ISO 27001 Policies for information security A.5.8 ISO 27001 Information security in project management A.5.10 ISO 27001 Acceptable use of information and other associated assets A.5.15 ISO 27001 Access control A.5.16 ISO 27001 Identity management A.5.17 ISO 27001 Authentication information A.5.18 ISO 27001 Access rights A.6.3 ISO 27001 Information security awareness, education and training A.6.5 ISO 27001 Responsibilities after termination or change of employment A.6.7 ISO 27001 Remote working A.7.7 ISO 27001 Clear desk and clear screen A.8.1 ISO 27001 User endpoint devices A.8.2 ISO 27001 Privileged access rights A.8.3 ISO 27001 Information access restriction A.8.5 ISO 27001 Secure authentication A.8.15 ISO 27001 Logging A.8.16 ISO 27001 Monitoring activities A.8.18 ISO 27001 Use of privileged utility programs A.8.20 ISO 27001 Networks security A.8.24 ISO 27001 Use of cryptography Cyber Essentials CE1.2 Cyber Ess. Protect the administrative interface CE2.2 Cyber Ess. Change default and guessable passwords CE2.3 Cyber Ess. Enforce device unlocking credentials CE4.1 Cyber Ess. Manage the account lifecycle CE4.2 Cyber Ess. Control administrative privileges CE4.3 Cyber Ess. Require multi-factor authentication CE4.4 Cyber Ess. Protect passwords against guessing