SekitCrosswalk
NIST CSF 2.0 · derived mapping target

DE.CM-03Personnel activity monitored

Monitor personnel activity and technology usage for signs of misuse or compromise, balancing detection with privacy and proportionality.

Mapped from the Sekit CSF

The Sekit controls that cover this requirement, lens by lens.

ISO/IEC 27001:2022 counterparts

Reached through the Sekit CSF controls both map to — a mapping, not a formal equivalence.

ISO/IEC 42001:2023 — Annex A counterparts

Evidence that proves this control

What an auditor, or Sekit's evidence engine, asks for.

Data loss prevention configuration
The controls that prevent sensitive data from leaving the company without authorisation, and techniques to mask or anonymise data.
Logging and monitoring configuration
How the company collects and keeps activity logs from its systems, and how security alerts are generated and handled.
Zero Trust and advanced detection
The advanced network-security and detection approaches: Zero Trust access (never trust by default), behavior analytics (UEBA), and custom detection engineering.
From the Sekit evidence catalog

Related controls

Via the shared Sekit CSF topic, not the framework's own index.

Ask Sekura: “What evidence proves DE.CM-03?”
Also via MCP, free with account