Sekit CSF · OT/ICS Security · Policy
RCF-0427IR for ICS
Incident response procedures specific to operational technology environments are formally defined
Mapping at a glance
RCF-0427IR for ICSOT/ICS Security · Policy
A.5.24Information security incident management planning and preparationISO/IEC 27001:2022A.5.26Response to information security incidentsISO/IEC 27001:2022RS.MA-01Incident response plan executedNIST CSF 2.0RS.MA-02Incident reports triagedNIST CSF 2.0RS.MA-03Incidents categorized and prioritizedNIST CSF 2.0
RCF-0427 maps to 5 controls across the published frameworks. Open in the full graph →
Maps to ISO/IEC 27001:2022
Curated mapping with the reasoning, not just the codes.
A.5.24Information security incident management planning and preparationsupportsExtending the incident plan with production-specific procedures, covering who may touch operating machinery and when to isolate, is preparation for the OT-heavy incidents this control anticipates.A.5.26Response to information security incidentssupportsWritten procedures for who may touch operating machinery during an incident set the boundaries a production-system response must respect.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
RS.MA-01Incident response plan executedRS.MA-02Incident reports triagedRS.MA-03Incidents categorized and prioritized
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
OT/ICS security controls
The controls specific to industrial control systems: how their vulnerabilities and incidents are managed and how they align with the physical safety of processes.
From the Sekit evidence catalog
This topic through the other lenses
All OT/ICS Security controls
Ask Sekura: “What evidence proves RCF-0427?”
Also via MCP, free with account