NIST CSF 2.0 · derived mapping target
GV.OC-04Critical objectives and services understood
Be clear about which of your services others rely on, so you can communicate dependencies and protect the capabilities customers and partners count on most.
Mapping at a glance
GV.OC-04Critical objectives and services understoodNIST CSF 2.0
GV.OC-04 is covered by 9 Sekit CSF controls. +4 more in the table below. Open in the full graph →
Mapped from the Sekit CSF
The Sekit controls that cover this requirement, lens by lens.
RCF-0016Regulatory compliance · PolicyRCF-0017Regulatory compliance · ProcessRCF-0018Regulatory compliance · TechnicalRCF-0331Shared responsibility model · PolicyRCF-0332Shared responsibility model · ProcessRCF-0333Shared responsibility model · TechnicalRCF-0430Safety alignment · PolicyRCF-0431Safety alignment · ProcessRCF-0432Safety alignment · Technical
ISO/IEC 27001:2022 counterparts
Reached through the Sekit CSF controls both map to — a mapping, not a formal equivalence.
ISO/IEC 42001:2023 — Annex A counterparts
Cyber Essentials counterparts
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Business continuity plan
The plan describing how the company keeps operating during a major disruption: impact analysis, critical functions, and crisis management.
Organizational context and security scope
The document that captures the business mission and objectives, the interested parties (customers, regulators, partners, staff) and what they expect, the critical services others rely on, and the external dependencies (suppliers, infrastructure) your operations rest on.
From the Sekit evidence catalog
Related controls
Via the shared Sekit CSF topic, not the framework's own index.
Ask Sekura: “What evidence proves GV.OC-04?”
Also via MCP, free with account