Sekit CSF · Supply Chain Security · Technical
RCF-0327Offboarding vendors
Technical controls automate the revocation of supplier access and verify that no residual access remains
Mapping at a glance
RCF-0327Offboarding vendorsSupply Chain Security · Technical
RCF-0327 maps to 5 controls across the published frameworks. Open in the full graph →
Maps to ISO/IEC 27001:2022 · Annex A controls
Curated mapping with the reasoning, not just the codes.
A.5.16Identity managementsupportsAutomating supplier access revocation and technically confirming nothing residual remains applies A.5.16's lifecycle discipline to non-employee identities, not only staff accounts.A.5.18Access rightssupportsAutomating supplier access revocation and technically confirming nothing residual remains closes the same gap A.5.18 targets for employee offboarding, applied to vendors.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
Maps to Cyber Essentials
Curated mapping with the reasoning, not just the codes.
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Vendor due diligence and monitoring
How the company assesses a supplier's security before hiring and monitors it during the relationship, including the process when it ends.
From the Sekit evidence catalog
This topic through the other lenses
All Supply Chain Security controls
Ask Sekura: “What evidence proves RCF-0327?”
Connect your AI · free MCP
https://sekit.ai/api/mcp/crosswalk- In Claude or ChatGPT, add a custom connector and paste this URL.
- Sign in with your email to finish. Free, read-only, no organization required.