SekitCrosswalk
ENES
Start now
Sekit CSF · Vulnerability & Configuration · Technical

RCF-0225Configuration management

Technical tools continuously assess system configurations and automatically remediate or alert on deviations

Mapping at a glance
RCF-0225Configuration managementVulnerability & Configuration · Technical
A.8.9Configuration managementISO/IEC 27001:2022PR.PS-01Configuration management appliedNIST CSF 2.0PR.PS-02Software maintainedNIST CSF 2.0

RCF-0225 maps to 3 controls across the published frameworks. Open in the full graph →

Maps to ISO/IEC 27001:2022

Curated mapping with the reasoning, not just the codes.

A.8.9Configuration managementsupportsTooling that continuously checks configurations against the standard and fixes or alerts on deviations is the technical enforcement A.8.9's drift-detection requirement describes directly.

Maps to NIST CSF 2.0

Curated mapping with the reasoning, not just the codes.

PR.PS-01Configuration management appliedPR.PS-02Software maintained

Evidence that proves this control

What an auditor, or Sekit's evidence engine, asks for.

Device hardening baseline
The secure-configuration standard applied to devices when handed out (default settings, disabled services) and how compliance is checked.
From the Sekit evidence catalog

This topic through the other lenses

RCF-0223 PolicyRCF-0224 Process

All Vulnerability & Configuration controls

Vulnerability & Configuration
Ask Sekura: “What evidence proves RCF-0225?”
Also via MCP, free with account