Sekit CSF · Backup & Recovery · Policy
RCF-0241Immutable/offsite backups
Backups are formally required to be stored in a location that cannot be modified or deleted by attackers
Mapping at a glance
RCF-0241Immutable/offsite backupsBackup & Recovery · Policy
RCF-0241 maps to 4 controls across the published frameworks. Open in the full graph →
Maps to ISO/IEC 27001:2022
Curated mapping with the reasoning, not just the codes.
A.5.1Policies for information securitysupportsAmong A.5.1's topic-specific policies, Sekit's Immutable and offsite backups policy requires at least one backup copy that attackers cannot alter or delete.A.8.13Information backupsupportsThe immutable-backup policy facet requires at least one copy to sit offsite or in storage attackers cannot alter, directly addressing A.8.13's expectation that ransomware cannot destroy every copy.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Backup configuration and restore-test record
How backups are made (what is backed up, how often, where they are stored) and the proof that a restore has been tested successfully.
From the Sekit evidence catalog
This topic through the other lenses
All Backup & Recovery controls
Ask Sekura: “What evidence proves RCF-0241?”
Also via MCP, free with account