Sekit CSF · Incident Response · Technical
RCF-0267Playbooks
Technical tools execute or guide playbook steps automatically during incident response
Mapping at a glance
RCF-0267PlaybooksIncident Response · Technical
RCF-0267 maps to 5 controls across the published frameworks. Open in the full graph →
Maps to ISO/IEC 27001:2022
Curated mapping with the reasoning, not just the codes.
A.5.26Response to information security incidentsenablesEmbedding playbook steps into ticketing templates, EDR response actions or chat-based runbooks is what lets a response execute the documented procedure under pressure.A.8.16Monitoring activitiesrelatedEmbedding playbook steps into operational tooling guides the response after monitoring detects something, downstream of A.8.16's detection function.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
RS.MA-02Incident reports triagedRS.MA-03Incidents categorized and prioritizedRS.MA-04Incidents escalated
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Incident playbooks, exercises and forensics readiness
The step-by-step guides for the most likely incidents, the tabletop exercises, the post-incident review reports, and how evidence is preserved so an incident can be investigated.
From the Sekit evidence catalog
This topic through the other lenses
All Incident Response controls
Ask Sekura: “What evidence proves RCF-0267?”
Also via MCP, free with account