Sekit CSF · Endpoint Security · Policy
RCF-0145Configuration baselines
Approved security configuration standards are formally defined for all device types used by the company
Mapping at a glance
RCF-0145Configuration baselinesEndpoint Security · Policy
RCF-0145 maps to 6 controls across the published frameworks. +1 more in the table below. Open in the full graph →
Maps to ISO/IEC 27001:2022
Curated mapping with the reasoning, not just the codes.
A.5.1Policies for information securitysupportsSekit's Configuration baselines policy is part of A.5.1's topic-specific policy layer: it sets a management-approved configuration standard for every device type, reviewed at least once a year.A.8.9Configuration managementsupportsA written, management-approved configuration standard for every device type, reviewed at least annually, is the written-baseline leg A.8.9's requirement is built around.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
Maps to Cyber Essentials
Curated mapping with the reasoning, not just the codes.
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Device hardening baseline
The secure-configuration standard applied to devices when handed out (default settings, disabled services) and how compliance is checked.
From the Sekit evidence catalog
This topic through the other lenses
All Endpoint Security controls
Ask Sekura: “What evidence proves RCF-0145?”
Also via MCP, free with account