Sekit CSF · Cloud Security · Technical

RCF-0339CSPM posture

Cloud security posture management tools continuously scan for and alert on misconfigured cloud resources

Mapping at a glance

RCF-0339CSPM postureCloud Security · Technical

A.8.9Configuration managementISO/IEC 27001:2022 A.8.16Monitoring activitiesISO/IEC 27001:2022 DE.CM-01Networks monitoredNIST CSF 2.0 PR.PS-01Configuration management appliedNIST CSF 2.0 PR.PS-02Software maintainedNIST CSF 2.0

RCF-0339 maps to 7 controls across the published frameworks. +2 more in the table below. Open in the full graph →

Maps to ISO/IEC 27001:2022

Curated mapping with the reasoning, not just the codes.

A.8.9Configuration managementsupportsA tool that continuously scans cloud accounts for insecure configurations and alerts immediately is the automated drift detection A.8.9 expects, applied to cloud.A.8.16Monitoring activitiessupportsContinuous scanning of cloud accounts for insecure configurations with alerts is posture management scoped to the cloud, one piece of the monitoring across networks, systems and applications A.8.16 requires.

Maps to NIST CSF 2.0

Curated mapping with the reasoning, not just the codes.

DE.CM-01Networks monitored PR.PS-01Configuration management applied PR.PS-02Software maintained

Maps to Cyber Essentials

Curated mapping with the reasoning, not just the codes.

CE2.1Remove unnecessary accounts and software CE2.2Change default and guessable passwords

This topic through the other lenses

All Cloud Security controls

Ask Sekura: “What evidence proves RCF-0339?”

Also via MCP, free with account