Sekit CSF · OT/ICS Security · Process

RCF-0425Patch/compensating controls (ICS)

OT vulnerabilities are consistently assessed and compensating controls are applied where patching is not feasible

Mapping at a glance

RCF-0425Patch/compensating controls (ICS)OT/ICS Security · Process

A.8.8Management of technical vulnerabilitiesISO/IEC 27001:2022 ID.RA-05Inherent risk understoodNIST CSF 2.0 PR.PS-02Software maintainedNIST CSF 2.0 CE3.2Apply critical updates within 14 daysCyber Essentials

RCF-0425 maps to 4 controls across the published frameworks. Open in the full graph →

Maps to ISO/IEC 27001:2022

Curated mapping with the reasoning, not just the codes.

A.8.8Management of technical vulnerabilitiessupportsThe process facet assesses OT vulnerabilities as advisories arrive and puts a documented compensating measure in place wherever patching is not feasible.

Maps to NIST CSF 2.0

Curated mapping with the reasoning, not just the codes.

ID.RA-05Inherent risk understood PR.PS-02Software maintained

Maps to Cyber Essentials

Curated mapping with the reasoning, not just the codes.

CE3.2Apply critical updates within 14 days

Evidence that proves this control

What an auditor, or Sekit's evidence engine, asks for.

OT/ICS security controls

The controls specific to industrial control systems: how their vulnerabilities and incidents are managed and how they align with the physical safety of processes.

From the Sekit evidence catalog

This topic through the other lenses

All OT/ICS Security controls

Ask Sekura: “What evidence proves RCF-0425?”

Also via MCP, free with account