Sekit CSF · Supply Chain Security · Process
RCF-0320Contractual security clauses
Contractual security obligations are consistently enforced and suppliers are held accountable for non-compliance
Mapping at a glance
RCF-0320Contractual security clausesSupply Chain Security · Process
A.5.20Addressing information security within supplier agreementsISO/IEC 27001:2022 · Annex A controlsA.5.22Monitoring, review and change management of supplier servicesISO/IEC 27001:2022 · Annex A controlsGV.SC-03Supply chain risk integratedNIST CSF 2.0GV.SC-04Suppliers known and prioritizedNIST CSF 2.0GV.SC-06Due diligence before engagementNIST CSF 2.0
RCF-0320 maps to 6 controls across the published frameworks. +1 more in the table below. Open in the full graph →
Maps to ISO/IEC 27001:2022 · Annex A controls
Curated mapping with the reasoning, not just the codes.
A.5.20Addressing information security within supplier agreementssupportsTracking whether suppliers meet their contractual obligations, and acting on non-compliance, is what stops A.5.20's clauses from being filed and forgotten after signing.A.5.22Monitoring, review and change management of supplier servicessupportsTracking whether suppliers meet their contractual obligations and acting on non-compliance is A.5.22's review requirement checked against the agreement itself.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
GV.SC-03Supply chain risk integratedGV.SC-04Suppliers known and prioritizedGV.SC-06Due diligence before engagement
Maps to ISO/IEC 42001:2023 — Annex A
Curated mapping with the reasoning, not just the codes.
This topic through the other lenses
All Supply Chain Security controls
Ask Sekura: “What evidence proves RCF-0320?”
Connect your AI · free MCP
https://sekit.ai/api/mcp/crosswalk- In Claude or ChatGPT, add a custom connector and paste this URL.
- Sign in with your email to finish. Free, read-only, no organization required.