Framework crosswalk Sekit CSF2 frameworks Every topic through three lenses: policy, process, technical. Pick a family, then click any control to light up its mappings.
432 controls · 20 families · 2214 mapped pairs
Sekit CSF · Asset Management Crosswalk / Asset Management RCF-0037 Policy 3 mapped Hardware inventory ISO 27001 A.5.9 NIST CSF ID.AM-01 NIST CSF ID.AM-02 RCF-0038 Process 3 mapped Hardware inventory ISO 27001 A.5.9 NIST CSF ID.AM-01 NIST CSF ID.AM-02 RCF-0039 Technical 4 mapped Hardware inventory ISO 27001 A.5.9 ISO 27001 A.8.9 NIST CSF ID.AM-01 NIST CSF ID.AM-02 RCF-0040 Policy 4 mapped Software inventory ISO 27001 A.5.32 ISO 27001 A.5.9 NIST CSF ID.AM-02 NIST CSF ID.AM-05 RCF-0041 Process 5 mapped Software inventory ISO 27001 A.5.32 ISO 27001 A.5.9 ISO 27001 A.8.19 NIST CSF ID.AM-02 NIST CSF ID.AM-05 RCF-0042 Technical 5 mapped Software inventory ISO 27001 A.5.9 ISO 27001 A.8.19 ISO 27001 A.8.9 NIST CSF ID.AM-02 NIST CSF ID.AM-05 RCF-0043 Policy 6 mapped Data inventory ISO 27001 A.5.12 ISO 27001 A.5.34 ISO 27001 A.5.9 NIST CSF ID.AM-03 NIST CSF ID.AM-05 NIST CSF ID.AM-07 RCF-0044 Process 5 mapped Data inventory ISO 27001 A.5.12 ISO 27001 A.5.9 NIST CSF ID.AM-03 NIST CSF ID.AM-05 NIST CSF ID.AM-07 RCF-0045 Technical 6 mapped Data inventory ISO 27001 A.5.12 ISO 27001 A.5.9 ISO 27001 A.8.12 NIST CSF ID.AM-03 NIST CSF ID.AM-05 NIST CSF ID.AM-07 RCF-0046 Policy 4 mapped Service inventory ISO 27001 A.5.19 ISO 27001 A.5.9 NIST CSF ID.AM-03 NIST CSF ID.AM-05 RCF-0047 Process 5 mapped Service inventory ISO 27001 A.5.19 ISO 27001 A.5.22 ISO 27001 A.5.9 NIST CSF ID.AM-03 NIST CSF ID.AM-05 RCF-0048 Technical 5 mapped Service inventory ISO 27001 A.5.22 ISO 27001 A.5.9 ISO 27001 A.8.16 NIST CSF ID.AM-03 NIST CSF ID.AM-05 RCF-0049 Policy 5 mapped Ownership & custodians ISO 27001 A.5.2 ISO 27001 A.5.9 NIST CSF GV.RR-02 NIST CSF ID.AM-02 NIST CSF ID.AM-05 RCF-0050 Process 6 mapped Ownership & custodians ISO 27001 A.5.2 ISO 27001 A.5.36 ISO 27001 A.5.9 NIST CSF GV.RR-02 NIST CSF ID.AM-02 NIST CSF ID.AM-05 RCF-0051 Technical 6 mapped Ownership & custodians ISO 27001 A.5.9 ISO 27001 A.8.15 ISO 27001 A.8.16 NIST CSF GV.RR-02 NIST CSF ID.AM-02 NIST CSF ID.AM-05 RCF-0052 Policy 4 mapped Criticality tagging ISO 27001 A.5.12 ISO 27001 A.5.9 NIST CSF ID.AM-04 NIST CSF ID.AM-05 RCF-0053 Process 4 mapped Criticality tagging ISO 27001 A.5.12 ISO 27001 A.5.9 NIST CSF ID.AM-04 NIST CSF ID.AM-05 RCF-0054 Technical 5 mapped Criticality tagging ISO 27001 A.5.9 ISO 27001 A.8.16 ISO 27001 A.8.9 NIST CSF ID.AM-04 NIST CSF ID.AM-05 RCF-0055 Policy 5 mapped CMDB quality ISO 27001 A.5.37 ISO 27001 A.5.9 NIST CSF ID.AM-01 NIST CSF ID.AM-02 NIST CSF ID.AM-05 RCF-0056 Process 5 mapped CMDB quality ISO 27001 A.5.9 ISO 27001 A.8.32 NIST CSF ID.AM-01 NIST CSF ID.AM-02 NIST CSF ID.AM-05 RCF-0057 Technical 6 mapped CMDB quality ISO 27001 A.5.9 ISO 27001 A.8.32 ISO 27001 A.8.9 NIST CSF ID.AM-01 NIST CSF ID.AM-02 NIST CSF ID.AM-05 RCF-0058 Policy 4 mapped Shadow IT discovery ISO 27001 A.5.10 NIST CSF ID.AM-01 NIST CSF ID.AM-02 NIST CSF ID.AM-08 RCF-0059 Process 5 mapped Shadow IT discovery ISO 27001 A.5.10 ISO 27001 A.5.9 NIST CSF ID.AM-01 NIST CSF ID.AM-02 NIST CSF ID.AM-08 RCF-0060 Technical 6 mapped Shadow IT discovery ISO 27001 A.5.10 ISO 27001 A.5.9 ISO 27001 A.8.16 NIST CSF ID.AM-01 NIST CSF ID.AM-02 NIST CSF ID.AM-08
ISO/IEC 27001:2022 A.5.2 ISO 27001 Information security roles and responsibilities A.5.9 ISO 27001 Inventory of information and other associated assets A.5.10 ISO 27001 Acceptable use of information and other associated assets A.5.12 ISO 27001 Classification of information A.5.19 ISO 27001 Information security in supplier relationships A.5.22 ISO 27001 Monitoring, review and change management of supplier services A.5.32 ISO 27001 Intellectual property rights A.5.34 ISO 27001 Privacy and protection of personal identifiable information (PII) A.5.36 ISO 27001 Compliance with policies, rules and standards for information security A.5.37 ISO 27001 Documented operating procedures A.8.9 ISO 27001 Configuration management A.8.12 ISO 27001 Data leakage prevention A.8.15 ISO 27001 Logging A.8.16 ISO 27001 Monitoring activities A.8.19 ISO 27001 Installation of software on operational systems A.8.32 ISO 27001 Change management NIST CSF 2.0 GV.RR-02 NIST CSF Roles and responsibilities established ID.AM-01 NIST CSF Hardware inventory maintained ID.AM-02 NIST CSF Software inventory maintained ID.AM-03 NIST CSF Network data flows mapped ID.AM-04 NIST CSF Supplier service inventory maintained ID.AM-05 NIST CSF Assets prioritized by criticality ID.AM-07 NIST CSF Data inventory maintained ID.AM-08 NIST CSF Assets managed through lifecycle