Sekit CSF · Data Security · Policy
RCF-0103DLP monitoring
Sensitive data is masked or anonymised where full access is not required
Mapping at a glance
RCF-0103DLP monitoringData Security · Policy
RCF-0103 maps to 5 controls across the published frameworks. Open in the full graph →
Maps to ISO/IEC 27001:2022
Curated mapping with the reasoning, not just the codes.
A.5.12Classification of informationsupportsMonitoring for sensitive data leaving through unmonitored channels checks that A.5.12's classification tiers are respected in practice, catching confidential data that slips past its intended handling.A.8.11Data maskingsupportsThe DLP policy facet names which sensitive data categories must never leave the company and how movement is monitored, the written commitment A.8.11 expects.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
DE.CM-06External provider activity monitoredPR.DS-01Data-at-rest protectedPR.DS-02Data-in-transit protected
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Data loss prevention configuration
The controls that prevent sensitive data from leaving the company without authorisation, and techniques to mask or anonymise data.
From the Sekit evidence catalog
This topic through the other lenses
All Data Security controls
Ask Sekura: “What evidence proves RCF-0103?”
Also via MCP, free with account