NIST CSF 2.0 · derived mapping target
ID.RA-03Threats identified and recorded
Identify and document the internal and external threats relevant to your organization so risk decisions rest on a real threat picture.
Mapping at a glance
ID.RA-03Threats identified and recordedNIST CSF 2.0
ID.RA-03 is covered by 6 Sekit CSF controls. +1 more in the table below. Open in the full graph →
Mapped from the Sekit CSF
The Sekit controls that cover this requirement, lens by lens.
RCF-0118Threat modeling · PolicyRCF-0119Threat modeling · ProcessRCF-0120Threat modeling · TechnicalRCF-0355Privacy risk assessments (DPIA) · PolicyRCF-0356Privacy risk assessments (DPIA) · ProcessRCF-0357Privacy risk assessments (DPIA) · Technical
ISO/IEC 27001:2022 counterparts
Reached through the Sekit CSF controls both map to — a mapping, not a formal equivalence.
ISO/IEC 42001:2023 — Annex A counterparts
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Risk assessment and treatment plan
The record where the company identifies its security risks and decides what to do with each one (accept, reduce or transfer), with owners and deadlines.
Threat intelligence sources
The threat-intelligence sources you follow (vendor advisories, CERT/CSIRT bulletins, feeds) and your participation in security forums, associations or threat-sharing groups, plus how you use that information to watch your systems and prioritize your defenses.
From the Sekit evidence catalog
Related controls
Via the shared Sekit CSF topic, not the framework's own index.
Ask Sekura: “What evidence proves ID.RA-03?”
Also via MCP, free with account