SekitCrosswalk
ENES
Start now
Sekit CSF · Privacy · Process

RCF-0359Consent & preference mgmt

Consent is captured consistently before processing personal data and preferences are respected

Mapping at a glance
RCF-0359Consent & preference mgmtPrivacy · Process
A.5.34Privacy and protection of personal identifiable information (PII)ISO/IEC 27001:2022GV.OC-03Legal and regulatory requirements understoodNIST CSF 2.0GV.PO-02Cybersecurity policy maintainedNIST CSF 2.0

RCF-0359 maps to 3 controls across the published frameworks. Open in the full graph →

Maps to ISO/IEC 27001:2022

Curated mapping with the reasoning, not just the codes.

A.5.34Privacy and protection of personal identifiable information (PII)supportsCapturing recorded consent before processing starts, and honouring withdrawals everywhere the data flows, is what makes the consent policy's promise operate in daily practice rather than stay on paper.

Maps to NIST CSF 2.0

Curated mapping with the reasoning, not just the codes.

GV.OC-03Legal and regulatory requirements understoodGV.PO-02Cybersecurity policy maintained

Evidence that proves this control

What an auditor, or Sekit's evidence engine, asks for.

Privacy notice and consent records
The privacy information the company shows people before collecting their data (privacy notice / policy) and how consent is captured and respected.
From the Sekit evidence catalog

This topic through the other lenses

RCF-0358 PolicyRCF-0360 Technical

All Privacy controls

Privacy
Ask Sekura: “What evidence proves RCF-0359?”
Also via MCP, free with account