SekitCrosswalk
ENES
Start now
Sekit CSF · Data Security · Process

RCF-0107Data minimization

The data inventory is kept current and reviewed regularly

Mapping at a glance
RCF-0107Data minimizationData Security · Process
A.5.9Inventory of information and other associated assetsISO/IEC 27001:2022PR.DS-01Data-at-rest protectedNIST CSF 2.0PR.DS-10Data-in-use protectedNIST CSF 2.0A.7.6Data preparationISO/IEC 42001:2023 — Annex A

RCF-0107 maps to 4 controls across the published frameworks. Open in the full graph →

Maps to ISO/IEC 27001:2022

Curated mapping with the reasoning, not just the codes.

A.5.9Inventory of information and other associated assetssupportsThis process control reviews the data inventory on a fixed cycle, deleting or flagging data with no remaining purpose, the currency check A.5.9 expects of a data inventory.

Maps to NIST CSF 2.0

Curated mapping with the reasoning, not just the codes.

PR.DS-01Data-at-rest protectedPR.DS-10Data-in-use protected

Maps to ISO/IEC 42001:2023 — Annex A

Curated mapping with the reasoning, not just the codes.

A.7.6Data preparationsupportsRCF-0107's fixed review cycle keeps the data inventory current and prunes data without a purpose, a useful habit for AI training sets, but it reviews existence and purpose, not how a dataset was cleaned, labelled or split.

Evidence that proves this control

What an auditor, or Sekit's evidence engine, asks for.

Data inventory and classification
The record of the personal and sensitive data the company holds, where it lives and how it is classified by sensitivity.
From the Sekit evidence catalog

This topic through the other lenses

RCF-0106 PolicyRCF-0108 Technical

All Data Security controls

Data Security
Ask Sekura: “What evidence proves RCF-0107?”
Also via MCP, free with account