Framework crosswalk Sekit CSF2 frameworks Every topic through three lenses: policy, process, technical. Pick a family, then click any control to light up its mappings.
432 controls · 20 families · 2214 mapped pairs
Sekit CSF · Identity & Access Management Crosswalk / Identity & Access Management RCF-0061 Policy 5 mapped Identity lifecycle ISO 27001 A.5.15 ISO 27001 A.5.16 NIST CSF PR.AA-01 NIST CSF PR.AA-02 NIST CSF PR.AA-05 RCF-0062 Process 5 mapped Identity lifecycle ISO 27001 A.5.16 ISO 27001 A.5.18 NIST CSF PR.AA-01 NIST CSF PR.AA-02 NIST CSF PR.AA-05 RCF-0063 Technical 5 mapped Identity lifecycle ISO 27001 A.5.16 ISO 27001 A.5.18 NIST CSF PR.AA-01 NIST CSF PR.AA-02 NIST CSF PR.AA-05 RCF-0064 Policy 5 mapped Strong authentication (MFA) ISO 27001 A.5.15 ISO 27001 A.5.17 ISO 27001 A.8.5 NIST CSF PR.AA-01 NIST CSF PR.AA-02 RCF-0065 Process 4 mapped Strong authentication (MFA) ISO 27001 A.5.17 ISO 27001 A.8.5 NIST CSF PR.AA-01 NIST CSF PR.AA-02 RCF-0066 Technical 3 mapped Strong authentication (MFA) ISO 27001 A.8.5 NIST CSF PR.AA-01 NIST CSF PR.AA-02 RCF-0067 Policy 5 mapped Least privilege / RBAC ISO 27001 A.5.15 ISO 27001 A.5.18 ISO 27001 A.8.3 NIST CSF PR.AA-03 NIST CSF PR.AA-05 RCF-0068 Process 3 mapped Least privilege / RBAC ISO 27001 A.5.18 NIST CSF PR.AA-03 NIST CSF PR.AA-05 RCF-0069 Technical 4 mapped Least privilege / RBAC ISO 27001 A.5.15 ISO 27001 A.8.3 NIST CSF PR.AA-03 NIST CSF PR.AA-05 RCF-0070 Policy 4 mapped Privileged access management ISO 27001 A.5.15 ISO 27001 A.8.2 NIST CSF PR.AA-03 NIST CSF PR.AA-05 RCF-0071 Process 5 mapped Privileged access management ISO 27001 A.8.15 ISO 27001 A.8.18 ISO 27001 A.8.2 NIST CSF PR.AA-03 NIST CSF PR.AA-05 RCF-0072 Technical 6 mapped Privileged access management ISO 27001 A.8.15 ISO 27001 A.8.16 ISO 27001 A.8.18 ISO 27001 A.8.2 NIST CSF PR.AA-03 NIST CSF PR.AA-05 RCF-0073 Policy 5 mapped SSO & federation ISO 27001 A.5.1 ISO 27001 A.5.15 ISO 27001 A.5.16 NIST CSF PR.AA-01 NIST CSF PR.AA-02 RCF-0074 Process 5 mapped SSO & federation ISO 27001 A.5.15 ISO 27001 A.5.16 ISO 27001 A.5.8 NIST CSF PR.AA-01 NIST CSF PR.AA-02 RCF-0075 Technical 5 mapped SSO & federation ISO 27001 A.5.15 ISO 27001 A.5.16 ISO 27001 A.8.5 NIST CSF PR.AA-01 NIST CSF PR.AA-02 RCF-0076 Policy 4 mapped Password policy ISO 27001 A.5.1 ISO 27001 A.5.17 NIST CSF PR.AA-01 NIST CSF PR.AA-02 RCF-0077 Process 4 mapped Password policy ISO 27001 A.5.17 ISO 27001 A.6.3 NIST CSF PR.AA-01 NIST CSF PR.AA-02 RCF-0078 Technical 4 mapped Password policy ISO 27001 A.5.17 ISO 27001 A.8.5 NIST CSF PR.AA-01 NIST CSF PR.AA-02 RCF-0079 Policy 5 mapped Session management ISO 27001 A.5.15 ISO 27001 A.5.17 NIST CSF PR.AA-01 NIST CSF PR.AA-02 NIST CSF PR.AA-05 RCF-0080 Process 5 mapped Session management ISO 27001 A.5.10 ISO 27001 A.7.7 NIST CSF PR.AA-01 NIST CSF PR.AA-02 NIST CSF PR.AA-05 RCF-0081 Technical 5 mapped Session management ISO 27001 A.8.1 ISO 27001 A.8.5 NIST CSF PR.AA-01 NIST CSF PR.AA-02 NIST CSF PR.AA-05 RCF-0082 Policy 4 mapped Remote access ISO 27001 A.5.15 ISO 27001 A.6.7 NIST CSF PR.AA-05 NIST CSF PR.IR-01 RCF-0083 Process 4 mapped Remote access ISO 27001 A.6.3 ISO 27001 A.6.7 NIST CSF PR.AA-05 NIST CSF PR.IR-01 RCF-0084 Technical 6 mapped Remote access ISO 27001 A.6.7 ISO 27001 A.8.20 ISO 27001 A.8.24 ISO 27001 A.8.5 NIST CSF PR.AA-05 NIST CSF PR.IR-01 RCF-0085 Policy 4 mapped Access reviews (recertification) ISO 27001 A.5.15 ISO 27001 A.5.18 NIST CSF PR.AA-03 NIST CSF PR.AA-05 RCF-0086 Process 3 mapped Access reviews (recertification) ISO 27001 A.5.18 NIST CSF PR.AA-03 NIST CSF PR.AA-05 RCF-0087 Technical 5 mapped Access reviews (recertification) ISO 27001 A.5.18 ISO 27001 A.8.15 ISO 27001 A.8.16 NIST CSF PR.AA-03 NIST CSF PR.AA-05 RCF-0088 Policy 6 mapped JML (joiner-mover-leaver) ISO 27001 A.5.16 ISO 27001 A.5.18 ISO 27001 A.6.5 NIST CSF PR.AA-01 NIST CSF PR.AA-02 NIST CSF PR.AA-05 RCF-0089 Process 5 mapped JML (joiner-mover-leaver) ISO 27001 A.5.18 ISO 27001 A.6.5 NIST CSF PR.AA-01 NIST CSF PR.AA-02 NIST CSF PR.AA-05 RCF-0090 Technical 5 mapped JML (joiner-mover-leaver) ISO 27001 A.5.16 ISO 27001 A.5.18 NIST CSF PR.AA-01 NIST CSF PR.AA-02 NIST CSF PR.AA-05
ISO/IEC 27001:2022 A.5.1 ISO 27001 Policies for information security A.5.8 ISO 27001 Information security in project management A.5.10 ISO 27001 Acceptable use of information and other associated assets A.5.15 ISO 27001 Access control A.5.16 ISO 27001 Identity management A.5.17 ISO 27001 Authentication information A.5.18 ISO 27001 Access rights A.6.3 ISO 27001 Information security awareness, education and training A.6.5 ISO 27001 Responsibilities after termination or change of employment A.6.7 ISO 27001 Remote working A.7.7 ISO 27001 Clear desk and clear screen A.8.1 ISO 27001 User endpoint devices A.8.2 ISO 27001 Privileged access rights A.8.3 ISO 27001 Information access restriction A.8.5 ISO 27001 Secure authentication A.8.15 ISO 27001 Logging A.8.16 ISO 27001 Monitoring activities A.8.18 ISO 27001 Use of privileged utility programs A.8.20 ISO 27001 Networks security A.8.24 ISO 27001 Use of cryptography NIST CSF 2.0 PR.AA-01 NIST CSF Identities and credentials managed PR.AA-02 NIST CSF Identities proofed and bound PR.AA-03 NIST CSF Users and devices authenticated PR.AA-05 NIST CSF Access permissions managed PR.IR-01 NIST CSF Networks protected from unauthorized access