Sekit CSF · Privacy · Process
RCF-0371Cross-border transfers
International data transfers consistently use approved safeguards such as standard contractual clauses
Mapping at a glance
RCF-0371Cross-border transfersPrivacy · Process
A.5.14Information transferISO/IEC 27001:2022A.5.34Privacy and protection of personal identifiable information (PII)ISO/IEC 27001:2022GV.OC-03Legal and regulatory requirements understoodNIST CSF 2.0GV.SC-05Supply chain requirements in contractsNIST CSF 2.0GV.SC-06Due diligence before engagementNIST CSF 2.0
RCF-0371 maps to 5 controls across the published frameworks. Open in the full graph →
Maps to ISO/IEC 27001:2022
Curated mapping with the reasoning, not just the codes.
A.5.14Information transferrelatedVerifying every vendor receiving personal data abroad holds a valid safeguard is the legal counterpart to A.5.14's technical transfer protections, checked before and during the relationship.A.5.34Privacy and protection of personal identifiable information (PII)supportsVerifying a valid transfer safeguard at vendor onboarding and periodically after keeps cross-border data flows compliant with this control's requirements over time, not only at signature.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
GV.OC-03Legal and regulatory requirements understoodGV.SC-05Supply chain requirements in contractsGV.SC-06Due diligence before engagement
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
DPIA and cross-border transfer records
The privacy impact assessments done before new data processing and the records of personal-data transfers to other countries.
From the Sekit evidence catalog
This topic through the other lenses
All Privacy controls
Ask Sekura: “What evidence proves RCF-0371?”
Also via MCP, free with account