Sekit CSF · OT/ICS Security · Policy
RCF-0424Patch/compensating controls (ICS)
A formal approach manages security vulnerabilities in OT systems where traditional patching is not possible
Mapping at a glance
RCF-0424Patch/compensating controls (ICS)OT/ICS Security · Policy
RCF-0424 maps to 5 controls across the published frameworks. Open in the full graph →
Maps to ISO/IEC 27001:2022 · Annex A controls
Curated mapping with the reasoning, not just the codes.
A.5.37Documented operating proceduressupportsThis policy control defines a written approach for handling vulnerabilities in systems that cannot be patched normally, including when compensating measures apply, one of the operating procedures A.5.37 requires documented.A.8.8Management of technical vulnerabilitiessupportsThis policy facet defines a documented approach for OT vulnerabilities that cannot be patched on normal IT timelines, the compensating leg A.8.8 anticipates for production systems.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
Maps to Cyber Essentials
Curated mapping with the reasoning, not just the codes.
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
OT/ICS security controls
The controls specific to industrial control systems: how their vulnerabilities and incidents are managed and how they align with the physical safety of processes.
From the Sekit evidence catalog
This topic through the other lenses
All OT/ICS Security controls
Ask Sekura: “What evidence proves RCF-0424?”
Connect your AI · free MCP
https://sekit.ai/api/mcp/crosswalk- In Claude or ChatGPT, add a custom connector and paste this URL.
- Sign in with your email to finish. Free, read-only, no organization required.