SekitCrosswalk
ENES
Start now
Sekit CSF · Incident Response · Policy

RCF-0259IR plan

The company has a formal plan defining how to respond to security incidents

Mapping at a glance
RCF-0259IR planIncident Response · Policy
A.5.24Information security incident management planning and preparationISO/IEC 27001:2022RS.MA-01Incident response plan executedNIST CSF 2.0RS.MA-02Incident reports triagedNIST CSF 2.0

RCF-0259 maps to 3 controls across the published frameworks. Open in the full graph →

Maps to ISO/IEC 27001:2022

Curated mapping with the reasoning, not just the codes.

A.5.24Information security incident management planning and preparationequivalentThe formal written incident response plan is the same deliverable ISO asks for here: a documented process defining detection, handling and reporting before an incident occurs.

Maps to NIST CSF 2.0

Curated mapping with the reasoning, not just the codes.

RS.MA-01Incident response plan executedRS.MA-02Incident reports triaged

Evidence that proves this control

What an auditor, or Sekit's evidence engine, asks for.

Incident response plan
The plan defining how the company acts when a security incident occurs: who does what, who is notified, and within what timeframes.
From the Sekit evidence catalog

This topic through the other lenses

RCF-0260 ProcessRCF-0261 Technical

All Incident Response controls

Incident Response
Ask Sekura: “What evidence proves RCF-0259?”
Also via MCP, free with account