Sekit CSF · Cloud Security · Process

RCF-0338CSPM posture

Cloud security posture is consistently monitored and misconfigurations are remediated within agreed timelines

Mapping at a glance

RCF-0338CSPM postureCloud Security · Process

A.8.9Configuration managementISO/IEC 27001:2022 A.8.16Monitoring activitiesISO/IEC 27001:2022 DE.CM-01Networks monitoredNIST CSF 2.0 PR.PS-01Configuration management appliedNIST CSF 2.0 PR.PS-02Software maintainedNIST CSF 2.0

RCF-0338 maps to 7 controls across the published frameworks. +2 more in the table below. Open in the full graph →

Maps to ISO/IEC 27001:2022

Curated mapping with the reasoning, not just the codes.

A.8.9Configuration managementsupportsReviewing cloud configuration findings on schedule and fixing misconfigurations within severity-based deadlines is A.8.9's review-and-correct cycle scoped to cloud.A.8.16Monitoring activitiessupportsReviewing cloud configuration findings on a recurring schedule and fixing them within deadlines operationalizes A.8.16's monitoring for cloud misconfigurations.

Maps to NIST CSF 2.0

Curated mapping with the reasoning, not just the codes.

DE.CM-01Networks monitored PR.PS-01Configuration management applied PR.PS-02Software maintained

Maps to Cyber Essentials

Curated mapping with the reasoning, not just the codes.

CE2.1Remove unnecessary accounts and software CE2.2Change default and guessable passwords

This topic through the other lenses

All Cloud Security controls

Ask Sekura: “What evidence proves RCF-0338?”

Also via MCP, free with account