Sekit CSF · Governance & Risk · Technical
RCF-0033Control testing program
Automated tools regularly test technical controls
Mapping at a glance
RCF-0033Control testing programGovernance & Risk · Technical
RCF-0033 maps to 7 controls across the published frameworks. +2 more in the table below. Open in the full graph →
Maps to ISO/IEC 27001:2022
Curated mapping with the reasoning, not just the codes.
A.8.8Management of technical vulnerabilitiessupportsScheduled vulnerability scans and configuration drift checks exercise technical controls continuously, giving A.8.8's exposure picture ongoing rather than point-in-time evidence.A.8.16Monitoring activitiesrelatedScheduled vulnerability scans, backup verification and configuration drift checks test that controls work, a related discipline to A.8.16's monitoring for signs of an active security incident.A.8.29Security testing in development and acceptancesupportsThe Sekit technical control runs automated tooling such as scheduled scans continuously, extending the testing rigor this ISO control requires beyond a one-time check before release.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
GV.RM-05Lines of communication for risk establishedID.IM-01Improvements from evaluationsID.IM-02Improvements from tests and exercisesID.IM-03Improvements from operations
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Security metrics report
The report or dashboard the company uses to measure how its security is doing (e.g. incidents, pending patches, training completion) and present it to leadership.
From the Sekit evidence catalog
This topic through the other lenses
All Governance & Risk controls
Ask Sekura: “What evidence proves RCF-0033?”
Also via MCP, free with account