NIST CSF 2.0 · derived mapping target
GV.OC-02Stakeholder needs understood
Identify the internal and external parties who care about your security (customers, regulators, partners, staff) and capture what each expects. Their needs shape how much protection is enough.
Mapping at a glance
GV.OC-02Stakeholder needs understoodNIST CSF 2.0
GV.OC-02 is covered by 6 Sekit CSF controls. +1 more in the table below. Open in the full graph →
Mapped from the Sekit CSF
The Sekit controls that cover this requirement, lens by lens.
RCF-0016Regulatory compliance · PolicyRCF-0017Regulatory compliance · ProcessRCF-0018Regulatory compliance · TechnicalRCF-0379Regulatory mapping · PolicyRCF-0380Regulatory mapping · ProcessRCF-0381Regulatory mapping · Technical
ISO/IEC 27001:2022 counterparts
Reached through the Sekit CSF controls both map to — a mapping, not a formal equivalence.
ISO/IEC 42001:2023 — Annex A counterparts
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Regulatory obligations register
The list of laws, regulations and frameworks that apply to the company (e.g. GDPR, sector rules) and how they map to your internal controls.
Organizational context and security scope
The document that captures the business mission and objectives, the interested parties (customers, regulators, partners, staff) and what they expect, the critical services others rely on, and the external dependencies (suppliers, infrastructure) your operations rest on.
From the Sekit evidence catalog
Related controls
Via the shared Sekit CSF topic, not the framework's own index.
Ask Sekura: “What evidence proves GV.OC-02?”
Also via MCP, free with account