Sekit CSF · Supply Chain Security · Policy
RCF-0322Ongoing monitoring
The company formally monitors the security posture of its key suppliers throughout the relationship
Mapping at a glance
RCF-0322Ongoing monitoringSupply Chain Security · Policy
A.5.19Information security in supplier relationshipsISO/IEC 27001:2022A.5.22Monitoring, review and change management of supplier servicesISO/IEC 27001:2022DE.CM-06External provider activity monitoredNIST CSF 2.0GV.SC-04Suppliers known and prioritizedNIST CSF 2.0GV.SC-06Due diligence before engagementNIST CSF 2.0
RCF-0322 maps to 7 controls across the published frameworks. +2 more in the table below. Open in the full graph →
Maps to ISO/IEC 27001:2022
Curated mapping with the reasoning, not just the codes.
A.5.19Information security in supplier relationshipssupportsCommitting to monitor key suppliers' security posture for the life of the relationship extends A.5.19's assessment past the onboarding moment, where most gaps open up over time.A.5.22Monitoring, review and change management of supplier servicessupportsCommitting in policy to monitor key suppliers' security posture for the whole relationship supports A.5.22's review requirement, but the commitment alone does not perform the review or change management the control also names.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
DE.CM-06External provider activity monitoredGV.SC-04Suppliers known and prioritizedGV.SC-06Due diligence before engagementGV.SC-07Supplier risk managed over relationship
Maps to ISO/IEC 42001:2023 — Annex A
Curated mapping with the reasoning, not just the codes.
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Vendor due diligence and monitoring
How the company assesses a supplier's security before hiring and monitors it during the relationship, including the process when it ends.
From the Sekit evidence catalog
This topic through the other lenses
All Supply Chain Security controls
Ask Sekura: “What evidence proves RCF-0322?”
Also via MCP, free with account