SekitCrosswalk
ENES
Start now
Sekit CSF · Privacy · Process

RCF-0362Data subject rights

Data subject requests are handled consistently and responded to within required timeframes

Mapping at a glance
RCF-0362Data subject rightsPrivacy · Process
A.5.34Privacy and protection of personal identifiable information (PII)ISO/IEC 27001:2022GV.OC-03Legal and regulatory requirements understoodNIST CSF 2.0GV.PO-02Cybersecurity policy maintainedNIST CSF 2.0

RCF-0362 maps to 3 controls across the published frameworks. Open in the full graph →

Maps to ISO/IEC 27001:2022

Curated mapping with the reasoning, not just the codes.

A.5.34Privacy and protection of personal identifiable information (PII)supportsVerifying identity, logging the request and tracking it against the one-month GDPR deadline is what turns the written rights procedure into requests that get answered on time, not lost in an inbox.

Maps to NIST CSF 2.0

Curated mapping with the reasoning, not just the codes.

GV.OC-03Legal and regulatory requirements understoodGV.PO-02Cybersecurity policy maintained

Evidence that proves this control

What an auditor, or Sekit's evidence engine, asks for.

Data subject rights procedure
The procedure for people to exercise their rights over their data (access, correction, deletion) and how those requests are handled on time.
From the Sekit evidence catalog

This topic through the other lenses

RCF-0361 PolicyRCF-0363 Technical

All Privacy controls

Privacy
Ask Sekura: “What evidence proves RCF-0362?”
Also via MCP, free with account