Crosswalk de marcos Sekit CSFISO/IEC 27001:2022 Cada tema a través de tres lentes: política, proceso y técnica. Elige una familia y haz clic en cualquier control para iluminar sus mapeos.
432 controles · 20 familias · 2214 pares mapeados
Sekit CSF · Identity & Access Management Crosswalk / Identity & Access Management RCF-0061 Política 2 mapeados Identity lifecycle ISO 27001 A.5.15 ISO 27001 A.5.16 RCF-0062 Proceso 2 mapeados Identity lifecycle ISO 27001 A.5.16 ISO 27001 A.5.18 RCF-0063 Técnica 2 mapeados Identity lifecycle ISO 27001 A.5.16 ISO 27001 A.5.18 RCF-0064 Política 3 mapeados Strong authentication (MFA) ISO 27001 A.5.15 ISO 27001 A.5.17 ISO 27001 A.8.5 RCF-0065 Proceso 2 mapeados Strong authentication (MFA) ISO 27001 A.5.17 ISO 27001 A.8.5 RCF-0066 Técnica 1 mapeados Strong authentication (MFA) ISO 27001 A.8.5 RCF-0067 Política 3 mapeados Least privilege / RBAC ISO 27001 A.5.15 ISO 27001 A.5.18 ISO 27001 A.8.3 RCF-0068 Proceso 1 mapeados Least privilege / RBAC ISO 27001 A.5.18 RCF-0069 Técnica 2 mapeados Least privilege / RBAC ISO 27001 A.5.15 ISO 27001 A.8.3 RCF-0070 Política 2 mapeados Privileged access management ISO 27001 A.5.15 ISO 27001 A.8.2 RCF-0071 Proceso 3 mapeados Privileged access management ISO 27001 A.8.15 ISO 27001 A.8.18 ISO 27001 A.8.2 RCF-0072 Técnica 4 mapeados Privileged access management ISO 27001 A.8.15 ISO 27001 A.8.16 ISO 27001 A.8.18 ISO 27001 A.8.2 RCF-0073 Política 3 mapeados SSO & federation ISO 27001 A.5.1 ISO 27001 A.5.15 ISO 27001 A.5.16 RCF-0074 Proceso 3 mapeados SSO & federation ISO 27001 A.5.15 ISO 27001 A.5.16 ISO 27001 A.5.8 RCF-0075 Técnica 3 mapeados SSO & federation ISO 27001 A.5.15 ISO 27001 A.5.16 ISO 27001 A.8.5 RCF-0076 Política 2 mapeados Password policy ISO 27001 A.5.1 ISO 27001 A.5.17 RCF-0077 Proceso 2 mapeados Password policy ISO 27001 A.5.17 ISO 27001 A.6.3 RCF-0078 Técnica 2 mapeados Password policy ISO 27001 A.5.17 ISO 27001 A.8.5 RCF-0079 Política 2 mapeados Session management ISO 27001 A.5.15 ISO 27001 A.5.17 RCF-0080 Proceso 2 mapeados Session management ISO 27001 A.5.10 ISO 27001 A.7.7 RCF-0081 Técnica 2 mapeados Session management ISO 27001 A.8.1 ISO 27001 A.8.5 RCF-0082 Política 2 mapeados Remote access ISO 27001 A.5.15 ISO 27001 A.6.7 RCF-0083 Proceso 2 mapeados Remote access ISO 27001 A.6.3 ISO 27001 A.6.7 RCF-0084 Técnica 4 mapeados Remote access ISO 27001 A.6.7 ISO 27001 A.8.20 ISO 27001 A.8.24 ISO 27001 A.8.5 RCF-0085 Política 2 mapeados Access reviews (recertification) ISO 27001 A.5.15 ISO 27001 A.5.18 RCF-0086 Proceso 1 mapeados Access reviews (recertification) ISO 27001 A.5.18 RCF-0087 Técnica 3 mapeados Access reviews (recertification) ISO 27001 A.5.18 ISO 27001 A.8.15 ISO 27001 A.8.16 RCF-0088 Política 3 mapeados JML (joiner-mover-leaver) ISO 27001 A.5.16 ISO 27001 A.5.18 ISO 27001 A.6.5 RCF-0089 Proceso 2 mapeados JML (joiner-mover-leaver) ISO 27001 A.5.18 ISO 27001 A.6.5 RCF-0090 Técnica 2 mapeados JML (joiner-mover-leaver) ISO 27001 A.5.16 ISO 27001 A.5.18
ISO/IEC 27001:2022 A.5.1 Policies for information security A.5.8 Information security in project management A.5.10 Acceptable use of information and other associated assets A.5.15 Access control A.5.16 Identity management A.5.17 Authentication information A.5.18 Access rights A.6.3 Information security awareness, education and training A.6.5 Responsibilities after termination or change of employment A.6.7 Remote working A.7.7 Clear desk and clear screen A.8.1 User endpoint devices A.8.2 Privileged access rights A.8.3 Information access restriction A.8.5 Secure authentication A.8.15 Logging A.8.16 Monitoring activities A.8.18 Use of privileged utility programs A.8.20 Networks security A.8.24 Use of cryptography