SekitCrosswalk
ENES
Start now
Sekit CSF · Privacy · Policy

RCF-0361Data subject rights

Formal procedures exist for individuals to exercise their rights to access, correct or delete their data

Mapping at a glance
RCF-0361Data subject rightsPrivacy · Policy
A.5.34Privacy and protection of personal identifiable information (PII)ISO/IEC 27001:2022GV.OC-03Legal and regulatory requirements understoodNIST CSF 2.0GV.PO-02Cybersecurity policy maintainedNIST CSF 2.0

RCF-0361 maps to 3 controls across the published frameworks. Open in the full graph →

Maps to ISO/IEC 27001:2022

Curated mapping with the reasoning, not just the codes.

A.5.34Privacy and protection of personal identifiable information (PII)supportsA written procedure naming who owns each step of an access, correction or deletion request gives staff a clear playbook instead of leaving rights requests to whoever happens to open the email.

Maps to NIST CSF 2.0

Curated mapping with the reasoning, not just the codes.

GV.OC-03Legal and regulatory requirements understoodGV.PO-02Cybersecurity policy maintained

Evidence that proves this control

What an auditor, or Sekit's evidence engine, asks for.

Data subject rights procedure
The procedure for people to exercise their rights over their data (access, correction, deletion) and how those requests are handled on time.
From the Sekit evidence catalog

This topic through the other lenses

RCF-0362 ProcessRCF-0363 Technical

All Privacy controls

Privacy
Ask Sekura: “What evidence proves RCF-0361?”
Also via MCP, free with account