SekitCrosswalk
ENES
Start now
Sekit CSF · Vulnerability & Configuration · Technical

RCF-0228Baseline compliance

Technical tools report baseline compliance rates across the infrastructure and track remediation progress

Mapping at a glance
RCF-0228Baseline complianceVulnerability & Configuration · Technical
A.8.9Configuration managementISO/IEC 27001:2022ID.RA-01Vulnerabilities identified and recordedNIST CSF 2.0PR.PS-01Configuration management appliedNIST CSF 2.0PR.PS-02Software maintainedNIST CSF 2.0

RCF-0228 maps to 4 controls across the published frameworks. Open in the full graph →

Maps to ISO/IEC 27001:2022

Curated mapping with the reasoning, not just the codes.

A.8.9Configuration managementsupportsTooling that reports baseline compliance rates and remediation progress over time gives A.8.9's compliance monitoring measurable evidence rather than a point-in-time claim.

Maps to NIST CSF 2.0

Curated mapping with the reasoning, not just the codes.

ID.RA-01Vulnerabilities identified and recordedPR.PS-01Configuration management appliedPR.PS-02Software maintained

Evidence that proves this control

What an auditor, or Sekit's evidence engine, asks for.

Device hardening baseline
The secure-configuration standard applied to devices when handed out (default settings, disabled services) and how compliance is checked.
From the Sekit evidence catalog

This topic through the other lenses

RCF-0226 PolicyRCF-0227 Process

All Vulnerability & Configuration controls

Vulnerability & Configuration
Ask Sekura: “What evidence proves RCF-0228?”
Also via MCP, free with account