Sekit CSF · Identity & Access Management · Technical

RCF-0069Least privilege / RBAC

Permissions are enforced at the system level not based on user behaviour

Mapping at a glance

RCF-0069Least privilege / RBACIdentity & Access Management · Technical

A.5.15Access controlISO/IEC 27001:2022 · Annex A controls A.8.3Information access restrictionISO/IEC 27001:2022 · Annex A controls PR.AA-03Users and devices authenticatedNIST CSF 2.0 PR.AA-05Access permissions managedNIST CSF 2.0 CE4.2Control administrative privilegesCyber Essentials

RCF-0069 maps to 5 controls across the published frameworks. Open in the full graph →

Maps to ISO/IEC 27001:2022 · Annex A controls

Curated mapping with the reasoning, not just the codes.

A.5.15Access controlsupportsEnforcing permissions at the platform level, with no shared logins standing in for real access control, is what makes A.5.15's role-based rules hold in practice.A.8.3Information access restrictionsupportsThe Sekit technical control enforces permissions at the platform level with no shared logins, the concrete enforcement mechanism this ISO control requires rather than a policy alone.

Maps to NIST CSF 2.0

Curated mapping with the reasoning, not just the codes.

PR.AA-03Users and devices authenticated PR.AA-05Access permissions managed

Maps to Cyber Essentials

Curated mapping with the reasoning, not just the codes.

CE4.2Control administrative privileges

This topic through the other lenses

All Identity & Access Management controls

Ask Sekura: “What evidence proves RCF-0069?”

Connect your AI · free MCP

https://sekit.ai/api/mcp/crosswalk

In Claude or ChatGPT, add a custom connector and paste this URL.
Sign in with your email to finish. Free, read-only, no organization required.