Sekit CSF · Supply Chain Security · Policy
RCF-0325Offboarding vendors
A formal process governs how supplier relationships are ended and access and data are removed
Mapping at a glance
RCF-0325Offboarding vendorsSupply Chain Security · Policy
A.5.19Information security in supplier relationshipsISO/IEC 27001:2022A.5.20Addressing information security within supplier agreementsISO/IEC 27001:2022GV.SC-07Supplier risk managed over relationshipNIST CSF 2.0GV.SC-08Suppliers in incident planningNIST CSF 2.0CE4.1Manage the account lifecycleCyber Essentials
RCF-0325 maps to 5 controls across the published frameworks. Open in the full graph →
Maps to ISO/IEC 27001:2022
Curated mapping with the reasoning, not just the codes.
A.5.19Information security in supplier relationshipssupportsA formal supplier exit procedure that guarantees access removal and data return closes the loop A.5.19 opens at onboarding, covering the relationship end to end.A.5.20Addressing information security within supplier agreementssupportsA formal supplier exit clause guaranteeing access removal and data return is one of the specific security terms A.5.20 asks organisations to write into supplier agreements.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
Maps to Cyber Essentials
Curated mapping with the reasoning, not just the codes.
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Vendor due diligence and monitoring
How the company assesses a supplier's security before hiring and monitors it during the relationship, including the process when it ends.
From the Sekit evidence catalog
This topic through the other lenses
All Supply Chain Security controls
Ask Sekura: “What evidence proves RCF-0325?”
Also via MCP, free with account