SekitCrosswalk
NIST CSF 2.0 · derived mapping target

ID.AM-05Assets prioritized by criticality

Rank your assets by classification, criticality, and impact on the mission so protection and resources go to what matters most.

Mapped from the Sekit CSF

The Sekit controls that cover this requirement, lens by lens.

ISO/IEC 27001:2022 counterparts

Reached through the Sekit CSF controls both map to — a mapping, not a formal equivalence.

ISO/IEC 42001:2023 — Annex A counterparts

Cyber Essentials counterparts

Evidence that proves this control

What an auditor, or Sekit's evidence engine, asks for.

Data inventory and classification
The record of the personal and sensitive data the company holds, where it lives and how it is classified by sensitivity.
Business continuity plan
The plan describing how the company keeps operating during a major disruption: impact analysis, critical functions, and crisis management.
From the Sekit evidence catalog

Related controls

Via the shared Sekit CSF topic, not the framework's own index.

Ask Sekura: “What evidence proves ID.AM-05?”
Also via MCP, free with account