Crosswalk de marcos Sekit CSFISO/IEC 27001:2022 Cada tema a través de tres lentes: política, proceso y técnica. Elige una familia y haz clic en cualquier control para iluminar sus mapeos.
432 controles · 20 familias · 2214 pares mapeados
Sekit CSF · Application Security Crosswalk / Application Security RCF-0115 Política 3 mapeados Secure SDLC policy ISO 27001 A.5.1 ISO 27001 A.5.8 ISO 27001 A.8.25 RCF-0116 Proceso 2 mapeados Secure SDLC policy ISO 27001 A.8.25 ISO 27001 A.8.32 RCF-0117 Técnica 3 mapeados Secure SDLC policy ISO 27001 A.8.25 ISO 27001 A.8.29 ISO 27001 A.8.31 RCF-0118 Política 3 mapeados Threat modeling ISO 27001 A.8.25 ISO 27001 A.8.26 ISO 27001 A.8.27 RCF-0119 Proceso 2 mapeados Threat modeling ISO 27001 A.8.25 ISO 27001 A.8.26 RCF-0120 Técnica 2 mapeados Threat modeling ISO 27001 A.8.25 ISO 27001 A.8.26 RCF-0121 Política 3 mapeados Secure code review ISO 27001 A.5.1 ISO 27001 A.8.25 ISO 27001 A.8.29 RCF-0122 Proceso 2 mapeados Secure code review ISO 27001 A.8.25 ISO 27001 A.8.29 RCF-0123 Técnica 2 mapeados Secure code review ISO 27001 A.8.28 ISO 27001 A.8.29 RCF-0124 Política 2 mapeados SAST/DAST ISO 27001 A.5.1 ISO 27001 A.8.29 RCF-0125 Proceso 2 mapeados SAST/DAST ISO 27001 A.8.25 ISO 27001 A.8.29 RCF-0126 Técnica 2 mapeados SAST/DAST ISO 27001 A.8.25 ISO 27001 A.8.29 RCF-0127 Política 3 mapeados Dependency/SBOM management ISO 27001 A.5.1 ISO 27001 A.5.9 ISO 27001 A.8.8 RCF-0128 Proceso 2 mapeados Dependency/SBOM management ISO 27001 A.5.9 ISO 27001 A.8.8 RCF-0129 Técnica 2 mapeados Dependency/SBOM management ISO 27001 A.8.29 ISO 27001 A.8.8 RCF-0130 Política 3 mapeados CI/CD hardening ISO 27001 A.5.1 ISO 27001 A.8.25 ISO 27001 A.8.9 RCF-0131 Proceso 2 mapeados CI/CD hardening ISO 27001 A.8.25 ISO 27001 A.8.32 RCF-0132 Técnica 3 mapeados CI/CD hardening ISO 27001 A.8.25 ISO 27001 A.8.4 ISO 27001 A.8.9 RCF-0133 Política 3 mapeados IaC scanning ISO 27001 A.5.1 ISO 27001 A.8.25 ISO 27001 A.8.9 RCF-0134 Proceso 2 mapeados IaC scanning ISO 27001 A.8.25 ISO 27001 A.8.9 RCF-0135 Técnica 2 mapeados IaC scanning ISO 27001 A.8.29 ISO 27001 A.8.9 RCF-0136 Política 2 mapeados API security ISO 27001 A.5.1 ISO 27001 A.8.26 RCF-0137 Proceso 3 mapeados API security ISO 27001 A.8.16 ISO 27001 A.8.26 ISO 27001 A.8.29 RCF-0138 Técnica 3 mapeados API security ISO 27001 A.5.15 ISO 27001 A.8.26 ISO 27001 A.8.5 RCF-0139 Política 3 mapeados Container security ISO 27001 A.5.1 ISO 27001 A.8.25 ISO 27001 A.8.9 RCF-0140 Proceso 2 mapeados Container security ISO 27001 A.8.25 ISO 27001 A.8.9 RCF-0141 Técnica 3 mapeados Container security ISO 27001 A.8.29 ISO 27001 A.8.7 ISO 27001 A.8.9 RCF-0142 Política 2 mapeados DevSecOps governance ISO 27001 A.5.1 ISO 27001 A.5.2 RCF-0143 Proceso 2 mapeados DevSecOps governance ISO 27001 A.5.4 ISO 27001 A.8.25 RCF-0144 Técnica 2 mapeados DevSecOps governance ISO 27001 A.8.15 ISO 27001 A.8.16
ISO/IEC 27001:2022 A.5.1 Policies for information security A.5.2 Information security roles and responsibilities A.5.4 Management responsibilities A.5.8 Information security in project management A.5.9 Inventory of information and other associated assets A.5.15 Access control A.8.4 Access to source code A.8.5 Secure authentication A.8.7 Protection against malware A.8.8 Management of technical vulnerabilities A.8.9 Configuration management A.8.15 Logging A.8.16 Monitoring activities A.8.25 Secure development life cycle A.8.26 Application security requirements A.8.27 Secure system architecture and engineering principles A.8.28 Secure coding A.8.29 Security testing in development and acceptance A.8.31 Separation of development, test and production environments A.8.32 Change management