Sekit CSF · Vulnerability & Configuration · Process

RCF-0236Penetration testing

Penetration tests are consistently scoped, conducted and findings are tracked to remediation

Mapping at a glance

RCF-0236Penetration testingVulnerability & Configuration · Process

A.8.8Management of technical vulnerabilitiesISO/IEC 27001:2022 · Annex A controls A.8.34Protection of information systems during audit testingISO/IEC 27001:2022 · Annex A controls ID.RA-05Inherent risk understoodNIST CSF 2.0 ID.RA-06Risk responses chosen and trackedNIST CSF 2.0

RCF-0236 maps to 4 controls across the published frameworks. Open in the full graph →

Maps to ISO/IEC 27001:2022 · Annex A controls

Curated mapping with the reasoning, not just the codes.

A.8.8Management of technical vulnerabilitiessupportsThe process facet scopes each test deliberately, runs it with a qualified tester and tracks every finding to closure or formal acceptance.A.8.34Protection of information systems during audit testingsupportsThe Sekit process control scopes every penetration test deliberately with a qualified tester and tracks findings to closure, the disciplined testing approach this ISO control requires to protect systems during audit activity.

Maps to NIST CSF 2.0

Curated mapping with the reasoning, not just the codes.

ID.RA-05Inherent risk understood ID.RA-06Risk responses chosen and tracked

This topic through the other lenses

All Vulnerability & Configuration controls

Ask Sekura: “What evidence proves RCF-0236?”

Connect your AI · free MCP

https://sekit.ai/api/mcp/crosswalk

In Claude or ChatGPT, add a custom connector and paste this URL.
Sign in with your email to finish. Free, read-only, no organization required.