Sekit CSF · Family
Compliance & Audit
15 controls in 5 topics, each seen through the policy, process and technical lenses.
Policy
RCF-0382Audit readiness5 mappingsThe company formally maintains a state of readiness to demonstrate compliance to external auditors at any timeRCF-0376Compliance calendar5 mappingsThe company formally tracks all regulatory deadlines, audit cycles and compliance obligations in a centralised scheduleRCF-0373Control evidence management8 mappingsThe company formally requires that evidence of security controls is collected and maintained for audit purposesRCF-0385Corrective action tracking4 mappingsAudit findings and compliance gaps are formally tracked as corrective actions with assigned owners and deadlinesRCF-0379Regulatory mapping5 mappingsAll regulations and frameworks applicable to the company are formally identified and mapped to internal controls
Process
RCF-0383Audit readiness6 mappingsAudit preparation activities are consistently completed ahead of scheduled reviews and evidence is kept currentRCF-0377Compliance calendar5 mappingsCompliance deadlines are consistently monitored and responsible owners are notified in advanceRCF-0374Control evidence management9 mappingsControl evidence is consistently gathered, labelled and stored in a way that supports audit and reviewRCF-0386Corrective action tracking4 mappingsCorrective actions are consistently progressed and status is reported until each finding is closedRCF-0380Regulatory mapping5 mappingsRegulatory requirements are consistently translated into control obligations and assigned to accountable owners
Technical
RCF-0384Audit readiness5 mappingsTechnical tools provide real-time visibility of control status and evidence completeness to support audit readinessRCF-0378Compliance calendar4 mappingsTechnical tools manage the compliance calendar and send automated reminders for approaching deadlinesRCF-0375Control evidence management5 mappingsTechnical tools automate evidence collection and maintain an organised library of compliance artefactsRCF-0387Corrective action tracking4 mappingsTechnical tools track corrective actions, send reminders and escalate overdue items automaticallyRCF-0381Regulatory mapping5 mappingsTechnical tools maintain a live mapping between regulatory requirements and the controls that address them
This family in ISO/IEC 27001:2022
Every framework item the family's controls map to, most-connected first — grouped by Sekit CSF family, never by the framework's own index.
This family in NIST CSF 2.0
This family in ISO/IEC 42001:2023 — Annex A
Ask Sekura: “What evidence proves Compliance & Audit?”
Also via MCP, free with account