SekitCrosswalk
ENES
Start free trial
Sekit CSF · Compliance & Audit · Policy

RCF-0385Corrective action tracking

Audit findings and compliance gaps are formally tracked as corrective actions with assigned owners and deadlines

Mapping at a glance
RCF-0385Corrective action trackingCompliance & Audit · Policy
A.5.36Compliance with policies, rules and standards for information securityISO/IEC 27001:2022 · Annex A controlsGV.RM-06Standardized risk method establishedNIST CSF 2.0GV.RM-07Strategic opportunities characterizedNIST CSF 2.0ID.IM-04Response and recovery plans maintainedNIST CSF 2.0

RCF-0385 maps to 4 controls across the published frameworks. Open in the full graph →

Maps to ISO/IEC 27001:2022 · Annex A controls

Curated mapping with the reasoning, not just the codes.

A.5.36Compliance with policies, rules and standards for information securityenablesThis policy control requires every audit finding or compliance gap to be logged with an owner, target date and closure criterion, the standard A.5.36's compliance checking enforces.

Maps to NIST CSF 2.0

Curated mapping with the reasoning, not just the codes.

GV.RM-06Standardized risk method establishedGV.RM-07Strategic opportunities characterizedID.IM-04Response and recovery plans maintained

Evidence that proves this control

What an auditor, or Sekit's evidence engine, asks for.

Audit evidence and corrective actions log
The file where proof that controls work is kept, plus the tracking of audit findings through to closure.
From the Sekit evidence catalog

This topic through the other lenses

RCF-0386 ProcessRCF-0387 Technical

All Compliance & Audit controls

Compliance & Audit
Ask Sekura: “What evidence proves RCF-0385?”
Connect your AI · free MCP
https://sekit.ai/api/mcp/crosswalk
  1. In Claude or ChatGPT, add a custom connector and paste this URL.
  2. Sign in with your email to finish. Free, read-only, no organization required.