SekitCrosswalk
ENES
Start free trial
Sekit CSF · Family

Compliance & Audit

15 controls in 5 topics, each seen through the policy, process and technical lenses.

Policy

RCF-0382Audit readiness5 mappingsThe company formally maintains a state of readiness to demonstrate compliance to external auditors at any timeRCF-0376Compliance calendar5 mappingsThe company formally tracks all regulatory deadlines, audit cycles and compliance obligations in a centralised scheduleRCF-0373Control evidence management8 mappingsThe company formally requires that evidence of security controls is collected and maintained for audit purposesRCF-0385Corrective action tracking4 mappingsAudit findings and compliance gaps are formally tracked as corrective actions with assigned owners and deadlinesRCF-0379Regulatory mapping5 mappingsAll regulations and frameworks applicable to the company are formally identified and mapped to internal controls

Process

RCF-0383Audit readiness6 mappingsAudit preparation activities are consistently completed ahead of scheduled reviews and evidence is kept currentRCF-0377Compliance calendar5 mappingsCompliance deadlines are consistently monitored and responsible owners are notified in advanceRCF-0374Control evidence management9 mappingsControl evidence is consistently gathered, labelled and stored in a way that supports audit and reviewRCF-0386Corrective action tracking4 mappingsCorrective actions are consistently progressed and status is reported until each finding is closedRCF-0380Regulatory mapping5 mappingsRegulatory requirements are consistently translated into control obligations and assigned to accountable owners

Technical

RCF-0384Audit readiness5 mappingsTechnical tools provide real-time visibility of control status and evidence completeness to support audit readinessRCF-0378Compliance calendar4 mappingsTechnical tools manage the compliance calendar and send automated reminders for approaching deadlinesRCF-0375Control evidence management5 mappingsTechnical tools automate evidence collection and maintain an organised library of compliance artefactsRCF-0387Corrective action tracking4 mappingsTechnical tools track corrective actions, send reminders and escalate overdue items automaticallyRCF-0381Regulatory mapping5 mappingsTechnical tools maintain a live mapping between regulatory requirements and the controls that address them

This family in ISO/IEC 27001:2022 · Annex A controls

Every framework item the family's controls map to, most-connected first — grouped by Sekit CSF family, never by the framework's own index.

A.5.36 Compliance with policies, rules and standards for information securityA.5.31 Legal, statutory, regulatory and contractual requirementsA.5.33 Protection of recordsA.5.35 Independent review of information securityA.8.15 Logging

This family in NIST CSF 2.0

GV.RM-05 Lines of communication for risk establishedID.IM-04 Response and recovery plans maintainedID.IM-03 Improvements from operationsGV.OC-01 Organizational mission understoodGV.OC-05 Dependencies understoodGV.RM-06 Standardized risk method establishedGV.RM-07 Strategic opportunities characterizedGV.OC-02 Stakeholder needs understood

This family in ISO/IEC 42001:2023 — Annex A

A.5.3 Documentation of AI system impact assessmentsA.6.2.3 Documentation of AI system design and developmentA.6.2.7 AI system technical documentationA.8.2 System documentation and information for users
Ask Sekura: “What evidence proves Compliance & Audit?”
Connect your AI · free MCP
https://sekit.ai/api/mcp/crosswalk
  1. In Claude or ChatGPT, add a custom connector and paste this URL.
  2. Sign in with your email to finish. Free, read-only, no organization required.