SekitCrosswalk
ENES
Start now
Sekit CSF · Endpoint Security · Process

RCF-0155Patch management

Patches are consistently applied on schedule and patch status is tracked across all managed endpoints

Mapping at a glance
RCF-0155Patch managementEndpoint Security · Process
A.8.8Management of technical vulnerabilitiesISO/IEC 27001:2022ID.RA-01Vulnerabilities identified and recordedNIST CSF 2.0PR.PS-02Software maintainedNIST CSF 2.0CE3.1Use licensed and supported softwareCyber EssentialsCE3.2Apply critical updates within 14 daysCyber Essentials

RCF-0155 maps to 5 controls across the published frameworks. Open in the full graph →

Maps to ISO/IEC 27001:2022

Curated mapping with the reasoning, not just the codes.

A.8.8Management of technical vulnerabilitiessupportsThe process facet applies updates on the committed schedule and tracks per-device patch status so nothing silently falls behind.

Maps to NIST CSF 2.0

Curated mapping with the reasoning, not just the codes.

ID.RA-01Vulnerabilities identified and recordedPR.PS-02Software maintained

Maps to Cyber Essentials

Curated mapping with the reasoning, not just the codes.

CE3.1Use licensed and supported softwareCE3.2Apply critical updates within 14 days

Evidence that proves this control

What an auditor, or Sekit's evidence engine, asks for.

Patch management report
The proof that security updates are applied on time across devices and systems, with tracking of what is still outstanding.
From the Sekit evidence catalog

This topic through the other lenses

RCF-0154 PolicyRCF-0156 Technical

All Endpoint Security controls

Endpoint Security
Ask Sekura: “What evidence proves RCF-0155?”
Also via MCP, free with account