Sekit CSF · Vulnerability & Configuration · Policy
RCF-0232Exposure management
The company formally identifies and manages its external attack surface to reduce the risk of exploitation
Mapping at a glance
RCF-0232Exposure managementVulnerability & Configuration · Policy
RCF-0232 maps to 6 controls across the published frameworks. +1 more in the table below. Open in the full graph →
Maps to ISO/IEC 27001:2022
Curated mapping with the reasoning, not just the codes.
A.5.1Policies for information securitysupportsSekit's Exposure management policy, one of A.5.1's topic-specific policies, states that the company maintains a view of everything it exposes to the internet and trims what has no business need.A.8.8Management of technical vulnerabilitiessupportsThis policy facet commits to maintaining a view of everything exposed to the internet and reducing exposure without business need, the exposure-management leg of A.8.8.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
ID.RA-01Vulnerabilities identified and recordedID.RA-05Inherent risk understoodID.RA-07Changes and exceptions managed
Maps to Cyber Essentials
Curated mapping with the reasoning, not just the codes.
This topic through the other lenses
All Vulnerability & Configuration controls
Ask Sekura: “What evidence proves RCF-0232?”
Also via MCP, free with account