Sekit CSF · Cloud Security · Policy

RCF-0343Cloud logging

The company formally requires that all significant cloud activity is logged and retained

Mapping at a glance

RCF-0343Cloud loggingCloud Security · Policy

A.5.37Documented operating proceduresISO/IEC 27001:2022 · Annex A controls A.8.15LoggingISO/IEC 27001:2022 · Annex A controls DE.AE-03Information correlatedNIST CSF 2.0 DE.CM-01Networks monitoredNIST CSF 2.0 DE.CM-03Personnel activity monitoredNIST CSF 2.0

RCF-0343 maps to 5 controls across the published frameworks. Open in the full graph →

Maps to ISO/IEC 27001:2022 · Annex A controls

Curated mapping with the reasoning, not just the codes.

A.5.37Documented operating proceduresrelatedThis policy control states in writing which cloud activity must be logged and for how long, a documented operating requirement adjacent to the procedures A.5.37 covers for IT facilities.A.8.15LoggingenablesStating in writing which cloud activity must be logged and who is accountable gives A.8.15's logging requirement its scope in cloud environments.

Maps to NIST CSF 2.0

Curated mapping with the reasoning, not just the codes.

DE.AE-03Information correlated DE.CM-01Networks monitored DE.CM-03Personnel activity monitored

This topic through the other lenses

All Cloud Security controls

Ask Sekura: “What evidence proves RCF-0343?”

Connect your AI · free MCP

https://sekit.ai/api/mcp/crosswalk

In Claude or ChatGPT, add a custom connector and paste this URL.
Sign in with your email to finish. Free, read-only, no organization required.