Framework crosswalk Sekit CSF2 frameworks Every topic through three lenses: policy, process, technical. Pick a family, then click any control to light up its mappings.
432 controls · 20 families · 2214 mapped pairs
Sekit CSF · Identity & Access Management Crosswalk / Identity & Access Management RCF-0061 Policy 3 mapped Identity lifecycle ISO 27001 A.5.15 ISO 27001 A.5.16 Cyber Ess. CE4.1 RCF-0062 Process 3 mapped Identity lifecycle ISO 27001 A.5.16 ISO 27001 A.5.18 Cyber Ess. CE4.1 RCF-0063 Technical 3 mapped Identity lifecycle ISO 27001 A.5.16 ISO 27001 A.5.18 Cyber Ess. CE4.1 RCF-0064 Policy 5 mapped Strong authentication (MFA) ISO 27001 A.5.15 ISO 27001 A.5.17 ISO 27001 A.8.5 Cyber Ess. CE4.3 Cyber Ess. CE4.4 RCF-0065 Process 3 mapped Strong authentication (MFA) ISO 27001 A.5.17 ISO 27001 A.8.5 Cyber Ess. CE4.3 RCF-0066 Technical 3 mapped Strong authentication (MFA) ISO 27001 A.8.5 Cyber Ess. CE4.3 Cyber Ess. CE4.4 RCF-0067 Policy 4 mapped Least privilege / RBAC ISO 27001 A.5.15 ISO 27001 A.5.18 ISO 27001 A.8.3 Cyber Ess. CE4.2 RCF-0068 Process 3 mapped Least privilege / RBAC ISO 27001 A.5.18 Cyber Ess. CE4.1 Cyber Ess. CE4.2 RCF-0069 Technical 3 mapped Least privilege / RBAC ISO 27001 A.5.15 ISO 27001 A.8.3 Cyber Ess. CE4.2 RCF-0070 Policy 3 mapped Privileged access management ISO 27001 A.5.15 ISO 27001 A.8.2 Cyber Ess. CE4.2 RCF-0071 Process 4 mapped Privileged access management ISO 27001 A.8.15 ISO 27001 A.8.18 ISO 27001 A.8.2 Cyber Ess. CE4.2 RCF-0072 Technical 6 mapped Privileged access management ISO 27001 A.8.15 ISO 27001 A.8.16 ISO 27001 A.8.18 ISO 27001 A.8.2 Cyber Ess. CE4.2 Cyber Ess. CE4.3 RCF-0073 Policy 3 mapped SSO & federation ISO 27001 A.5.1 ISO 27001 A.5.15 ISO 27001 A.5.16 RCF-0074 Process 3 mapped SSO & federation ISO 27001 A.5.15 ISO 27001 A.5.16 ISO 27001 A.5.8 RCF-0075 Technical 4 mapped SSO & federation ISO 27001 A.5.15 ISO 27001 A.5.16 ISO 27001 A.8.5 Cyber Ess. CE4.3 RCF-0076 Policy 4 mapped Password policy ISO 27001 A.5.1 ISO 27001 A.5.17 Cyber Ess. CE2.2 Cyber Ess. CE4.4 RCF-0077 Process 3 mapped Password policy ISO 27001 A.5.17 ISO 27001 A.6.3 Cyber Ess. CE4.4 RCF-0078 Technical 4 mapped Password policy ISO 27001 A.5.17 ISO 27001 A.8.5 Cyber Ess. CE2.3 Cyber Ess. CE4.4 RCF-0079 Policy 3 mapped Session management ISO 27001 A.5.15 ISO 27001 A.5.17 Cyber Ess. CE2.3 RCF-0080 Process 3 mapped Session management ISO 27001 A.5.10 ISO 27001 A.7.7 Cyber Ess. CE2.3 RCF-0081 Technical 3 mapped Session management ISO 27001 A.8.1 ISO 27001 A.8.5 Cyber Ess. CE2.3 RCF-0082 Policy 4 mapped Remote access ISO 27001 A.5.15 ISO 27001 A.6.7 Cyber Ess. CE1.2 Cyber Ess. CE4.3 RCF-0083 Process 3 mapped Remote access ISO 27001 A.6.3 ISO 27001 A.6.7 Cyber Ess. CE4.3 RCF-0084 Technical 6 mapped Remote access ISO 27001 A.6.7 ISO 27001 A.8.20 ISO 27001 A.8.24 ISO 27001 A.8.5 Cyber Ess. CE1.2 Cyber Ess. CE4.3 RCF-0085 Policy 4 mapped Access reviews (recertification) ISO 27001 A.5.15 ISO 27001 A.5.18 Cyber Ess. CE4.1 Cyber Ess. CE4.2 RCF-0086 Process 3 mapped Access reviews (recertification) ISO 27001 A.5.18 Cyber Ess. CE4.1 Cyber Ess. CE4.2 RCF-0087 Technical 3 mapped Access reviews (recertification) ISO 27001 A.5.18 ISO 27001 A.8.15 ISO 27001 A.8.16 RCF-0088 Policy 4 mapped JML (joiner-mover-leaver) ISO 27001 A.5.16 ISO 27001 A.5.18 ISO 27001 A.6.5 Cyber Ess. CE4.1 RCF-0089 Process 3 mapped JML (joiner-mover-leaver) ISO 27001 A.5.18 ISO 27001 A.6.5 Cyber Ess. CE4.1 RCF-0090 Technical 3 mapped JML (joiner-mover-leaver) ISO 27001 A.5.16 ISO 27001 A.5.18 Cyber Ess. CE4.1
ISO/IEC 27001:2022 A.5.1 ISO 27001 Policies for information security A.5.8 ISO 27001 Information security in project management A.5.10 ISO 27001 Acceptable use of information and other associated assets A.5.15 ISO 27001 Access control A.5.16 ISO 27001 Identity management A.5.17 ISO 27001 Authentication information A.5.18 ISO 27001 Access rights A.6.3 ISO 27001 Information security awareness, education and training A.6.5 ISO 27001 Responsibilities after termination or change of employment A.6.7 ISO 27001 Remote working A.7.7 ISO 27001 Clear desk and clear screen A.8.1 ISO 27001 User endpoint devices A.8.2 ISO 27001 Privileged access rights A.8.3 ISO 27001 Information access restriction A.8.5 ISO 27001 Secure authentication A.8.15 ISO 27001 Logging A.8.16 ISO 27001 Monitoring activities A.8.18 ISO 27001 Use of privileged utility programs A.8.20 ISO 27001 Networks security A.8.24 ISO 27001 Use of cryptography Cyber Essentials CE1.2 Cyber Ess. Protect the administrative interface CE2.2 Cyber Ess. Change default and guessable passwords CE2.3 Cyber Ess. Enforce device unlocking credentials CE4.1 Cyber Ess. Manage the account lifecycle CE4.2 Cyber Ess. Control administrative privileges CE4.3 Cyber Ess. Require multi-factor authentication CE4.4 Cyber Ess. Protect passwords against guessing