SekitCrosswalk
ENES
Start free trial
Sekit CSF · Vulnerability & Configuration · Technical

RCF-0225Configuration management

Technical tools continuously assess system configurations and automatically remediate or alert on deviations

Mapping at a glance
RCF-0225Configuration managementVulnerability & Configuration · Technical
A.8.9Configuration managementISO/IEC 27001:2022 · Annex A controlsPR.PS-01Configuration management appliedNIST CSF 2.0PR.PS-02Software maintainedNIST CSF 2.0

RCF-0225 maps to 3 controls across the published frameworks. Open in the full graph →

Maps to ISO/IEC 27001:2022 · Annex A controls

Curated mapping with the reasoning, not just the codes.

A.8.9Configuration managementsupportsTooling that continuously checks configurations against the standard and fixes or alerts on deviations is the technical enforcement A.8.9's drift-detection requirement describes directly.

Maps to NIST CSF 2.0

Curated mapping with the reasoning, not just the codes.

PR.PS-01Configuration management appliedPR.PS-02Software maintained

Evidence that proves this control

What an auditor, or Sekit's evidence engine, asks for.

Device hardening baseline
The secure-configuration standard applied to devices when handed out (default settings, disabled services) and how compliance is checked.
From the Sekit evidence catalog

This topic through the other lenses

RCF-0223 PolicyRCF-0224 Process

All Vulnerability & Configuration controls

Vulnerability & Configuration
Ask Sekura: “What evidence proves RCF-0225?”
Connect your AI · free MCP
https://sekit.ai/api/mcp/crosswalk
  1. In Claude or ChatGPT, add a custom connector and paste this URL.
  2. Sign in with your email to finish. Free, read-only, no organization required.