Sekit CSF · Vulnerability & Configuration · Technical

RCF-0237Penetration testing

Technical infrastructure supports controlled penetration testing without affecting production availability

Mapping at a glance

RCF-0237Penetration testingVulnerability & Configuration · Technical

A.8.31Separation of development, test and production environmentsISO/IEC 27001:2022 A.8.34Protection of information systems during audit testingISO/IEC 27001:2022 ID.RA-05Inherent risk understoodNIST CSF 2.0 ID.RA-06Risk responses chosen and trackedNIST CSF 2.0

RCF-0237 maps to 4 controls across the published frameworks. Open in the full graph →

Maps to ISO/IEC 27001:2022

Curated mapping with the reasoning, not just the codes.

A.8.31Separation of development, test and production environmentssupportsThe Sekit technical control prepares isolated test targets and safeguards to keep production available, applying the environment separation this ISO control requires to testing activity specifically.A.8.34Protection of information systems during audit testingsupportsThis Sekit technical control prepares isolated targets and safeguards that keep production available during testing, the technical precondition that lets audit testing under this ISO control run safely.

Maps to NIST CSF 2.0

Curated mapping with the reasoning, not just the codes.

ID.RA-05Inherent risk understood ID.RA-06Risk responses chosen and tracked

This topic through the other lenses

All Vulnerability & Configuration controls

Ask Sekura: “What evidence proves RCF-0237?”

Also via MCP, free with account