Framework crosswalk Sekit CSFISO/IEC 27001:2022 Every topic through three lenses: policy, process, technical. Pick a family, then click any control to light up its mappings.
432 controls · 20 families · 2214 mapped pairs
Sekit CSF · Secure Operations Crosswalk / Secure Operations RCF-0400 Policy 2 mapped Change management ISO 27001 A.5.37 ISO 27001 A.8.32 RCF-0401 Process 2 mapped Change management ISO 27001 A.8.31 ISO 27001 A.8.32 RCF-0402 Technical 2 mapped Change management ISO 27001 A.8.32 ISO 27001 A.8.9 RCF-0403 Policy 2 mapped Release management ISO 27001 A.8.25 ISO 27001 A.8.32 RCF-0404 Process 3 mapped Release management ISO 27001 A.8.29 ISO 27001 A.8.31 ISO 27001 A.8.32 RCF-0405 Technical 2 mapped Release management ISO 27001 A.8.19 ISO 27001 A.8.32 RCF-0406 Policy 2 mapped SRE/Resilience practices ISO 27001 A.5.30 ISO 27001 A.8.14 RCF-0407 Process 2 mapped SRE/Resilience practices ISO 27001 A.5.30 ISO 27001 A.8.6 RCF-0408 Technical 3 mapped SRE/Resilience practices ISO 27001 A.8.14 ISO 27001 A.8.16 ISO 27001 A.8.6 RCF-0409 Policy 2 mapped Availability management ISO 27001 A.5.30 ISO 27001 A.8.14 RCF-0410 Process 2 mapped Availability management ISO 27001 A.8.15 ISO 27001 A.8.16 RCF-0411 Technical 3 mapped Availability management ISO 27001 A.8.14 ISO 27001 A.8.16 ISO 27001 A.8.6 RCF-0412 Policy 2 mapped Capacity & performance mgmt ISO 27001 A.5.30 ISO 27001 A.8.6 RCF-0413 Process 2 mapped Capacity & performance mgmt ISO 27001 A.8.16 ISO 27001 A.8.6 RCF-0414 Technical 2 mapped Capacity & performance mgmt ISO 27001 A.8.16 ISO 27001 A.8.6 RCF-0415 Policy 2 mapped Problem management ISO 27001 A.5.27 ISO 27001 A.5.37 RCF-0416 Process 2 mapped Problem management ISO 27001 A.5.27 ISO 27001 A.8.16 RCF-0417 Technical 3 mapped Problem management ISO 27001 A.5.27 ISO 27001 A.8.15 ISO 27001 A.8.16
ISO/IEC 27001:2022 A.5.27 Learning from information security incidents A.5.30 ICT readiness for business continuity A.5.37 Documented operating procedures A.8.6 Capacity management A.8.9 Configuration management A.8.14 Redundancy of information processing facilities A.8.15 Logging A.8.16 Monitoring activities A.8.19 Installation of software on operational systems A.8.25 Secure development life cycle A.8.29 Security testing in development and acceptance A.8.31 Separation of development, test and production environments A.8.32 Change management