NIST CSF 2.0 · derived mapping target
GV.OC-03Legal and regulatory requirements understood
Know which laws, regulations, and contract clauses apply to your data and operations, including privacy obligations. Track them so compliance is deliberate rather than accidental.
Mapping at a glance
GV.OC-03Legal and regulatory requirements understoodNIST CSF 2.0
GV.OC-03 is covered by 15 Sekit CSF controls. +10 more in the table below. Open in the full graph →
Mapped from the Sekit CSF
The Sekit controls that cover this requirement, lens by lens.
RCF-0016Regulatory compliance · PolicyRCF-0017Regulatory compliance · ProcessRCF-0018Regulatory compliance · TechnicalRCF-0358Consent & preference mgmt · PolicyRCF-0359Consent & preference mgmt · ProcessRCF-0360Consent & preference mgmt · TechnicalRCF-0361Data subject rights · PolicyRCF-0362Data subject rights · ProcessRCF-0363Data subject rights · TechnicalRCF-0367Privacy notices · PolicyRCF-0368Privacy notices · ProcessRCF-0369Privacy notices · TechnicalRCF-0370Cross-border transfers · PolicyRCF-0371Cross-border transfers · ProcessRCF-0372Cross-border transfers · Technical
ISO/IEC 27001:2022 counterparts
Reached through the Sekit CSF controls both map to — a mapping, not a formal equivalence.
ISO/IEC 42001:2023 — Annex A counterparts
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Regulatory obligations register
The list of laws, regulations and frameworks that apply to the company (e.g. GDPR, sector rules) and how they map to your internal controls.
Compliance calendar
The calendar where the company tracks its regulatory deadlines, audit cycles and recurring compliance obligations.
From the Sekit evidence catalog
Related controls
Via the shared Sekit CSF topic, not the framework's own index.
Ask Sekura: “What evidence proves GV.OC-03?”
Also via MCP, free with account