Sekit CSF · Endpoint Security · Policy
RCF-0166Local admin control
The use of local administrator rights on company devices is formally restricted and requires approval
Mapping at a glance
RCF-0166Local admin controlEndpoint Security · Policy
RCF-0166 maps to 5 controls across the published frameworks. Open in the full graph →
Maps to ISO/IEC 27001:2022
Curated mapping with the reasoning, not just the codes.
A.5.1Policies for information securitysupportsAmong A.5.1's topic-specific policies, Sekit's Local admin control policy keeps day-to-day accounts free of administrator rights unless granted on approval, per person and per need.A.8.2Privileged access rightsenablesRequiring that day-to-day accounts have no admin rights, with privilege granted only on approval, is the policy basis A.8.2's tight control over privilege depends on.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
Maps to Cyber Essentials
Curated mapping with the reasoning, not just the codes.
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Local admin and removable-media controls
The rules on who may have administrator rights on their own device and on the use of USB sticks and external drives.
From the Sekit evidence catalog
This topic through the other lenses
All Endpoint Security controls
Ask Sekura: “What evidence proves RCF-0166?”
Also via MCP, free with account