Sekit CSF · Data Security · Process
RCF-0104DLP monitoring
Data masking is consistently applied in non-production environments
Mapping at a glance
RCF-0104DLP monitoringData Security · Process
RCF-0104 maps to 6 controls across the published frameworks. +1 more in the table below. Open in the full graph →
Maps to ISO/IEC 27001:2022
Curated mapping with the reasoning, not just the codes.
A.8.11Data maskingsupportsThe DLP process facet reviews alerts on a recurring cycle and follows up confirmed exfiltration attempts, the detective check for sensitive data that got past masking, pseudonymization, or anonymization on its way out.A.8.31Separation of development, test and production environmentssupportsThis Sekit process control reviews data loss alerts and follows up confirmed attempts to move sensitive data out, helping keep sensitive data from leaking between environments as this ISO control requires.A.8.33Test informationsupportsThis Sekit process control reviews data loss alerts and follows up confirmed attempts to move sensitive data out, the operational safeguard A.8.33 requires when test information is derived from real data.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
DE.CM-06External provider activity monitoredPR.DS-01Data-at-rest protectedPR.DS-02Data-in-transit protected
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Data loss prevention configuration
The controls that prevent sensitive data from leaving the company without authorisation, and techniques to mask or anonymise data.
From the Sekit evidence catalog
This topic through the other lenses
All Data Security controls
Ask Sekura: “What evidence proves RCF-0104?”
Also via MCP, free with account