SekitCrosswalk
ENES
Start now
Sekit CSF · Endpoint Security · Technical

RCF-0156Patch management

Technical tools automate patch deployment and report on outstanding patches by age and severity

Mapping at a glance
RCF-0156Patch managementEndpoint Security · Technical
A.8.8Management of technical vulnerabilitiesISO/IEC 27001:2022ID.RA-01Vulnerabilities identified and recordedNIST CSF 2.0PR.PS-02Software maintainedNIST CSF 2.0CE3.2Apply critical updates within 14 daysCyber Essentials

RCF-0156 maps to 4 controls across the published frameworks. Open in the full graph →

Maps to ISO/IEC 27001:2022

Curated mapping with the reasoning, not just the codes.

A.8.8Management of technical vulnerabilitiessupportsThe technical facet automates patch deployment and reports outstanding patches by age and severity across the fleet, the tooling A.8.8's patch program relies on.

Maps to NIST CSF 2.0

Curated mapping with the reasoning, not just the codes.

ID.RA-01Vulnerabilities identified and recordedPR.PS-02Software maintained

Maps to Cyber Essentials

Curated mapping with the reasoning, not just the codes.

CE3.2Apply critical updates within 14 days

Evidence that proves this control

What an auditor, or Sekit's evidence engine, asks for.

Patch management report
The proof that security updates are applied on time across devices and systems, with tracking of what is still outstanding.
From the Sekit evidence catalog

This topic through the other lenses

RCF-0154 PolicyRCF-0155 Process

All Endpoint Security controls

Endpoint Security
Ask Sekura: “What evidence proves RCF-0156?”
Also via MCP, free with account