NIST CSF 2.0 · derived mapping target
GV.RR-02Roles and responsibilities established
Define cybersecurity roles and responsibilities clearly, communicate them, and enforce them so no critical task falls through the gaps.
Mapping at a glance
GV.RR-02Roles and responsibilities establishedNIST CSF 2.0
GV.RR-02 is covered by 6 Sekit CSF controls. +1 more in the table below. Open in the full graph →
Mapped from the Sekit CSF
The Sekit controls that cover this requirement, lens by lens.
RCF-0004Roles & responsibilities · PolicyRCF-0005Roles & responsibilities · ProcessRCF-0006Roles & responsibilities · TechnicalRCF-0049Ownership & custodians · PolicyRCF-0050Ownership & custodians · ProcessRCF-0051Ownership & custodians · Technical
ISO/IEC 27001:2022 · Annex A controls counterparts
Reached through the Sekit CSF controls both map to — a mapping, not a formal equivalence.
ISO/IEC 42001:2023 — Annex A counterparts
Cyber Essentials counterparts
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Security roles and responsibilities
The document or chart showing who owns each aspect of security in the company (e.g. a security org chart or a RACI matrix).
From the Sekit evidence catalog
Related controls
Via the shared Sekit CSF topic, not the framework's own index.
Ask Sekura: “What evidence proves GV.RR-02?”
Connect your AI · free MCP
https://sekit.ai/api/mcp/crosswalk- In Claude or ChatGPT, add a custom connector and paste this URL.
- Sign in with your email to finish. Free, read-only, no organization required.