Sekit CSF · Application Security · Policy
RCF-0139Container security
Security standards for building and running containerised applications are formally defined
Mapping at a glance
RCF-0139Container securityApplication Security · Policy
RCF-0139 maps to 7 controls across the published frameworks. +2 more in the table below. Open in the full graph →
Maps to ISO/IEC 27001:2022
Curated mapping with the reasoning, not just the codes.
A.5.1Policies for information securitysupportsSekit's Container security policy is a topic-specific policy under A.5.1 that sets written standards for how container images are built, stored and run.A.8.9Configuration managementsupportsWritten standards for how container images are built, stored and run set the configuration baseline A.8.9 expects for containerized workloads specifically.A.8.25Secure development life cyclerelatedThe container-security policy sets written standards for building and storing container images, a deployment concern beside rather than inside A.8.25's SDLC scope.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
PR.PS-01Configuration management appliedPR.PS-02Software maintainedPR.PS-04Logs generated for monitoring
Maps to Cyber Essentials
Curated mapping with the reasoning, not just the codes.
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
CI/CD pipeline security
The security controls in the automated build-and-deploy process, including containers and infrastructure-as-code.
From the Sekit evidence catalog
This topic through the other lenses
All Application Security controls
Ask Sekura: “What evidence proves RCF-0139?”
Also via MCP, free with account