Sekit CSF · Identity & Access Management · Policy
RCF-0061Identity lifecycle
User accounts are formally managed from creation to deletion across all systems
Mapping at a glance
RCF-0061Identity lifecycleIdentity & Access Management · Policy
RCF-0061 maps to 6 controls across the published frameworks. +1 more in the table below. Open in the full graph →
Maps to ISO/IEC 27001:2022
Curated mapping with the reasoning, not just the codes.
A.5.15Access controlenablesA documented identity lifecycle gives access control something stable to act on: without a clear rule for how accounts are created and changed, A.5.15's access decisions have no reliable account to attach to.A.5.16Identity managementsupportsSekit's Identity lifecycle control documents how accounts are requested, created, modified and removed across company systems, the written commitment behind A.5.16; the technical enforcement and joiner-mover-leaver procedure that carry it out day to day are mapped separately here.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
PR.AA-01Identities and credentials managedPR.AA-02Identities proofed and boundPR.AA-05Access permissions managed
Maps to Cyber Essentials
Curated mapping with the reasoning, not just the codes.
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Joiner-mover-leaver procedure
The process the company follows when someone joins, changes role, or leaves: how access and devices are granted and removed.
From the Sekit evidence catalog
This topic through the other lenses
All Identity & Access Management controls
Ask Sekura: “What evidence proves RCF-0061?”
Also via MCP, free with account