Sekit CSF · Governance & Risk · Process
RCF-0035Issues management
Issues are assigned owners and resolved within agreed timelines
Mapping at a glance
RCF-0035Issues managementGovernance & Risk · Process
A.5.25Assessment and decision on information security eventsISO/IEC 27001:2022A.5.26Response to information security incidentsISO/IEC 27001:2022A.5.27Learning from information security incidentsISO/IEC 27001:2022GV.RM-06Standardized risk method establishedNIST CSF 2.0GV.RM-07Strategic opportunities characterizedNIST CSF 2.0
RCF-0035 maps to 7 controls across the published frameworks. +2 more in the table below. Open in the full graph →
Maps to ISO/IEC 27001:2022
Curated mapping with the reasoning, not just the codes.
A.5.25Assessment and decision on information security eventssupportsAssigning an owner and due date to each logged issue is what happens right after an event is assessed and confirmed as something needing action.A.5.26Response to information security incidentssupportsAssigning owners and due dates to logged issues is the mechanism that keeps incident-driven corrective actions from stalling once the response is over.A.5.27Learning from information security incidentssupportsAssigning an owner and deadline to every logged issue is the tracking mechanism that keeps post-incident corrective actions from being forgotten.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
GV.RM-06Standardized risk method establishedGV.RM-07Strategic opportunities characterizedID.IM-04Response and recovery plans maintained
Maps to ISO/IEC 42001:2023 — Annex A
Curated mapping with the reasoning, not just the codes.
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Risk assessment and treatment plan
The record where the company identifies its security risks and decides what to do with each one (accept, reduce or transfer), with owners and deadlines.
From the Sekit evidence catalog
This topic through the other lenses
All Governance & Risk controls
Ask Sekura: “What evidence proves RCF-0035?”
Also via MCP, free with account