Sekit CSF · Endpoint Security · Policy
RCF-0160Device hardening
Security hardening requirements are formally defined to reduce the attack surface of all company devices
Mapping at a glance
RCF-0160Device hardeningEndpoint Security · Policy
RCF-0160 maps to 5 controls across the published frameworks. Open in the full graph →
Maps to ISO/IEC 27001:2022 · Annex A controls
Curated mapping with the reasoning, not just the codes.
A.5.1Policies for information securitysupportsSekit's Device hardening policy is part of A.5.1's topic-specific policy layer: it names the services, features and defaults that must be disabled to shrink the attack surface.A.8.9Configuration managementsupportsDefining in writing which services and defaults must be disabled to shrink attack surface is a specific hardening instance of A.8.9's configuration standards.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
Maps to Cyber Essentials
Curated mapping with the reasoning, not just the codes.
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Device hardening baseline
The secure-configuration standard applied to devices when handed out (default settings, disabled services) and how compliance is checked.
From the Sekit evidence catalog
This topic through the other lenses
All Endpoint Security controls
Ask Sekura: “What evidence proves RCF-0160?”
Connect your AI · free MCP
https://sekit.ai/api/mcp/crosswalk- In Claude or ChatGPT, add a custom connector and paste this URL.
- Sign in with your email to finish. Free, read-only, no organization required.