Framework crosswalk Sekit CSF2 frameworks Every topic through three lenses: policy, process, technical. Pick a family, then click any control to light up its mappings.
432 controls · 20 families · 2214 mapped pairs
Sekit CSF · Data Security Crosswalk / Data Security RCF-0091 Policy 4 mapped Data classification ISO 27001 A.5.12 ISO 27001 A.5.13 NIST CSF ID.AM-07 NIST CSF PR.DS-01 RCF-0092 Process 5 mapped Data classification ISO 27001 A.5.10 ISO 27001 A.5.12 ISO 27001 A.5.13 NIST CSF ID.AM-07 NIST CSF PR.DS-01 RCF-0093 Technical 5 mapped Data classification ISO 27001 A.5.12 ISO 27001 A.5.13 ISO 27001 A.8.11 NIST CSF ID.AM-07 NIST CSF PR.DS-01 RCF-0094 Policy 4 mapped Encryption at rest ISO 27001 A.5.1 ISO 27001 A.8.24 NIST CSF PR.DS-01 NIST CSF PR.DS-02 RCF-0095 Process 3 mapped Encryption at rest ISO 27001 A.8.24 NIST CSF PR.DS-01 NIST CSF PR.DS-02 RCF-0096 Technical 4 mapped Encryption at rest ISO 27001 A.8.1 ISO 27001 A.8.24 NIST CSF PR.DS-01 NIST CSF PR.DS-02 RCF-0097 Policy 4 mapped Encryption in transit ISO 27001 A.5.14 ISO 27001 A.8.24 NIST CSF PR.DS-02 NIST CSF PR.DS-10 RCF-0098 Process 4 mapped Encryption in transit ISO 27001 A.5.14 ISO 27001 A.8.24 NIST CSF PR.DS-02 NIST CSF PR.DS-10 RCF-0099 Technical 5 mapped Encryption in transit ISO 27001 A.5.14 ISO 27001 A.8.20 ISO 27001 A.8.24 NIST CSF PR.DS-02 NIST CSF PR.DS-10 RCF-0100 Policy 3 mapped Key management ISO 27001 A.8.24 NIST CSF PR.DS-01 NIST CSF PR.DS-02 RCF-0101 Process 3 mapped Key management ISO 27001 A.8.24 NIST CSF PR.DS-01 NIST CSF PR.DS-02 RCF-0102 Technical 3 mapped Key management ISO 27001 A.8.24 NIST CSF PR.DS-01 NIST CSF PR.DS-02 RCF-0103 Policy 5 mapped DLP monitoring ISO 27001 A.5.12 ISO 27001 A.8.11 NIST CSF DE.CM-06 NIST CSF PR.DS-01 NIST CSF PR.DS-02 RCF-0104 Process 6 mapped DLP monitoring ISO 27001 A.8.11 ISO 27001 A.8.31 ISO 27001 A.8.33 NIST CSF DE.CM-06 NIST CSF PR.DS-01 NIST CSF PR.DS-02 RCF-0105 Technical 5 mapped DLP monitoring ISO 27001 A.8.11 ISO 27001 A.8.31 NIST CSF DE.CM-06 NIST CSF PR.DS-01 NIST CSF PR.DS-02 RCF-0106 Policy 3 mapped Data minimization ISO 27001 A.5.9 NIST CSF PR.DS-01 NIST CSF PR.DS-10 RCF-0107 Process 3 mapped Data minimization ISO 27001 A.5.9 NIST CSF PR.DS-01 NIST CSF PR.DS-10 RCF-0108 Technical 4 mapped Data minimization ISO 27001 A.5.9 ISO 27001 A.8.9 NIST CSF PR.DS-01 NIST CSF PR.DS-10 RCF-0109 Policy 6 mapped Data retention & disposal ISO 27001 A.5.1 ISO 27001 A.5.33 ISO 27001 A.7.14 ISO 27001 A.8.10 NIST CSF PR.DS-01 NIST CSF PR.DS-10 RCF-0110 Process 5 mapped Data retention & disposal ISO 27001 A.5.33 ISO 27001 A.7.14 ISO 27001 A.8.10 NIST CSF PR.DS-01 NIST CSF PR.DS-10 RCF-0111 Technical 5 mapped Data retention & disposal ISO 27001 A.7.14 ISO 27001 A.8.10 ISO 27001 A.8.15 NIST CSF PR.DS-01 NIST CSF PR.DS-10 RCF-0112 Policy 4 mapped Secrets management ISO 27001 A.5.1 ISO 27001 A.5.17 NIST CSF PR.DS-01 NIST CSF PR.DS-02 RCF-0113 Process 3 mapped Secrets management ISO 27001 A.5.17 NIST CSF PR.DS-01 NIST CSF PR.DS-02 RCF-0114 Technical 3 mapped Secrets management ISO 27001 A.5.17 NIST CSF PR.DS-01 NIST CSF PR.DS-02
ISO/IEC 27001:2022 A.5.1 ISO 27001 Policies for information security A.5.9 ISO 27001 Inventory of information and other associated assets A.5.10 ISO 27001 Acceptable use of information and other associated assets A.5.12 ISO 27001 Classification of information A.5.13 ISO 27001 Labelling of information A.5.14 ISO 27001 Information transfer A.5.17 ISO 27001 Authentication information A.5.33 ISO 27001 Protection of records A.7.14 ISO 27001 Secure disposal or re-use of equipment A.8.1 ISO 27001 User endpoint devices A.8.9 ISO 27001 Configuration management A.8.10 ISO 27001 Information deletion A.8.11 ISO 27001 Data masking A.8.15 ISO 27001 Logging A.8.20 ISO 27001 Networks security A.8.24 ISO 27001 Use of cryptography A.8.31 ISO 27001 Separation of development, test and production environments A.8.33 ISO 27001 Test information NIST CSF 2.0 DE.CM-06 NIST CSF External provider activity monitored ID.AM-07 NIST CSF Data inventory maintained PR.DS-01 NIST CSF Data-at-rest protected PR.DS-02 NIST CSF Data-in-transit protected PR.DS-10 NIST CSF Data-in-use protected