Sekit CSF · OT/ICS Security · Technical
RCF-0426Patch/compensating controls (ICS)
Technical compensating controls such as network monitoring and application whitelisting protect unpatched OT systems
Mapping at a glance
RCF-0426Patch/compensating controls (ICS)OT/ICS Security · Technical
RCF-0426 maps to 6 controls across the published frameworks. +1 more in the table below. Open in the full graph →
Maps to ISO/IEC 27001:2022
Curated mapping with the reasoning, not just the codes.
A.8.8Management of technical vulnerabilitiessupportsTechnical compensating controls, network isolation, application allowlisting, targeted monitoring, protect unpatchable production systems the way A.8.8 expects when normal patching cannot apply.A.8.9Configuration managementrelatedNetwork isolation, application allowlisting and targeted monitoring for unpatchable production systems are compensating configuration controls where A.8.9's normal baseline-and-patch approach cannot apply.A.8.16Monitoring activitiessupportsCompensating controls including monitoring focused on unpatchable devices apply A.8.16's monitoring discipline to production systems that cannot be patched directly.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
Maps to Cyber Essentials
Curated mapping with the reasoning, not just the codes.
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
OT/ICS security controls
The controls specific to industrial control systems: how their vulnerabilities and incidents are managed and how they align with the physical safety of processes.
From the Sekit evidence catalog
This topic through the other lenses
All OT/ICS Security controls
Ask Sekura: “What evidence proves RCF-0426?”
Also via MCP, free with account