Framework crosswalk Sekit CSF2 frameworks Every topic through three lenses: policy, process, technical. Pick a family, then click any control to light up its mappings.
432 controls · 20 families · 2214 mapped pairs
Sekit CSF · Vulnerability & Configuration Crosswalk / Vulnerability & Configuration RCF-0217 Policy 4 mapped Vulnerability scanning ISO 27001 A.5.1 ISO 27001 A.8.8 NIST CSF ID.RA-01 NIST CSF ID.RA-05 RCF-0218 Process 4 mapped Vulnerability scanning ISO 27001 A.5.37 ISO 27001 A.8.8 NIST CSF ID.RA-01 NIST CSF ID.RA-05 RCF-0219 Technical 3 mapped Vulnerability scanning ISO 27001 A.8.8 NIST CSF ID.RA-01 NIST CSF ID.RA-05 RCF-0220 Policy 5 mapped Vulnerability remediation SLAs ISO 27001 A.5.1 ISO 27001 A.8.8 NIST CSF ID.IM-02 NIST CSF ID.RA-05 NIST CSF ID.RA-07 RCF-0221 Process 5 mapped Vulnerability remediation SLAs ISO 27001 A.5.37 ISO 27001 A.8.8 NIST CSF ID.IM-02 NIST CSF ID.RA-05 NIST CSF ID.RA-07 RCF-0222 Technical 4 mapped Vulnerability remediation SLAs ISO 27001 A.8.8 NIST CSF ID.IM-02 NIST CSF ID.RA-05 NIST CSF ID.RA-07 RCF-0223 Policy 4 mapped Configuration management ISO 27001 A.5.1 ISO 27001 A.8.9 NIST CSF PR.PS-01 NIST CSF PR.PS-02 RCF-0224 Process 4 mapped Configuration management ISO 27001 A.5.36 ISO 27001 A.8.9 NIST CSF PR.PS-01 NIST CSF PR.PS-02 RCF-0225 Technical 3 mapped Configuration management ISO 27001 A.8.9 NIST CSF PR.PS-01 NIST CSF PR.PS-02 RCF-0226 Policy 5 mapped Baseline compliance ISO 27001 A.5.1 ISO 27001 A.8.9 NIST CSF ID.RA-01 NIST CSF PR.PS-01 NIST CSF PR.PS-02 RCF-0227 Process 5 mapped Baseline compliance ISO 27001 A.5.36 ISO 27001 A.8.9 NIST CSF ID.RA-01 NIST CSF PR.PS-01 NIST CSF PR.PS-02 RCF-0228 Technical 4 mapped Baseline compliance ISO 27001 A.8.9 NIST CSF ID.RA-01 NIST CSF PR.PS-01 NIST CSF PR.PS-02 RCF-0229 Policy 5 mapped Patch prioritization ISO 27001 A.5.1 ISO 27001 A.8.8 NIST CSF ID.RA-05 NIST CSF ID.RA-07 NIST CSF PR.PS-02 RCF-0230 Process 5 mapped Patch prioritization ISO 27001 A.5.37 ISO 27001 A.8.8 NIST CSF ID.RA-05 NIST CSF ID.RA-07 NIST CSF PR.PS-02 RCF-0231 Technical 5 mapped Patch prioritization ISO 27001 A.5.7 ISO 27001 A.8.8 NIST CSF ID.RA-05 NIST CSF ID.RA-07 NIST CSF PR.PS-02 RCF-0232 Policy 5 mapped Exposure management ISO 27001 A.5.1 ISO 27001 A.8.8 NIST CSF ID.RA-01 NIST CSF ID.RA-05 NIST CSF ID.RA-07 RCF-0233 Process 5 mapped Exposure management ISO 27001 A.5.9 ISO 27001 A.8.8 NIST CSF ID.RA-01 NIST CSF ID.RA-05 NIST CSF ID.RA-07 RCF-0234 Technical 5 mapped Exposure management ISO 27001 A.8.16 ISO 27001 A.8.8 NIST CSF ID.RA-01 NIST CSF ID.RA-05 NIST CSF ID.RA-07 RCF-0235 Policy 4 mapped Penetration testing ISO 27001 A.5.1 ISO 27001 A.8.8 NIST CSF ID.RA-05 NIST CSF ID.RA-06 RCF-0236 Process 4 mapped Penetration testing ISO 27001 A.8.34 ISO 27001 A.8.8 NIST CSF ID.RA-05 NIST CSF ID.RA-06 RCF-0237 Technical 4 mapped Penetration testing ISO 27001 A.8.31 ISO 27001 A.8.34 NIST CSF ID.RA-05 NIST CSF ID.RA-06
ISO/IEC 27001:2022 · Annex A controls A.5.1 ISO 27001 Policies for information security A.5.7 ISO 27001 Threat intelligence A.5.9 ISO 27001 Inventory of information and other associated assets A.5.36 ISO 27001 Compliance with policies, rules and standards for information security A.5.37 ISO 27001 Documented operating procedures A.8.8 ISO 27001 Management of technical vulnerabilities A.8.9 ISO 27001 Configuration management A.8.16 ISO 27001 Monitoring activities A.8.31 ISO 27001 Separation of development, test and production environments A.8.34 ISO 27001 Protection of information systems during audit testing NIST CSF 2.0 ID.IM-02 NIST CSF Improvements from tests and exercises ID.RA-01 NIST CSF Vulnerabilities identified and recorded ID.RA-05 NIST CSF Inherent risk understood ID.RA-06 NIST CSF Risk responses chosen and tracked ID.RA-07 NIST CSF Changes and exceptions managed PR.PS-01 NIST CSF Configuration management applied PR.PS-02 NIST CSF Software maintained