SekitCrosswalk
ENES
Start now
Sekit CSF · Backup & Recovery · Technical

RCF-0240Backup policy

Technical controls automate backup execution and alert when backups fail or are incomplete

Mapping at a glance
RCF-0240Backup policyBackup & Recovery · Technical
A.8.13Information backupISO/IEC 27001:2022PR.DS-10Data-in-use protectedNIST CSF 2.0PR.IR-04Adequate capacity maintainedNIST CSF 2.0

RCF-0240 maps to 3 controls across the published frameworks. Open in the full graph →

Maps to ISO/IEC 27001:2022

Curated mapping with the reasoning, not just the codes.

A.8.13Information backupsupportsRCF-0240 covers the running backup tooling: scheduled jobs, protected copies, and executed restore tests. That is the operational core of A.8.13, which treats an untested backup as no backup.

Maps to NIST CSF 2.0

Curated mapping with the reasoning, not just the codes.

PR.DS-10Data-in-use protectedPR.IR-04Adequate capacity maintained

Evidence that proves this control

What an auditor, or Sekit's evidence engine, asks for.

Backup configuration and restore-test record
How backups are made (what is backed up, how often, where they are stored) and the proof that a restore has been tested successfully.
From the Sekit evidence catalog

This topic through the other lenses

RCF-0238 PolicyRCF-0239 Process

All Backup & Recovery controls

Backup & Recovery
Ask Sekura: “What evidence proves RCF-0240?”
Also via MCP, free with account