Sekit CSF · Governance & Risk · Technical
RCF-0003Policy management
Technical controls enforce compliance with security policies
Mapping at a glance
RCF-0003Policy managementGovernance & Risk · Technical
A.5.36Compliance with policies, rules and standards for information securityISO/IEC 27001:2022 · Annex A controlsA.5.37Documented operating proceduresISO/IEC 27001:2022 · Annex A controlsA.8.9Configuration managementISO/IEC 27001:2022 · Annex A controlsGV.PO-01Cybersecurity policy establishedNIST CSF 2.0GV.PO-02Cybersecurity policy maintainedNIST CSF 2.0
RCF-0003 maps to 7 controls across the published frameworks. +2 more in the table below. Open in the full graph →
Maps to ISO/IEC 27001:2022 · Annex A controls
Curated mapping with the reasoning, not just the codes.
A.5.36Compliance with policies, rules and standards for information securitysupportsThis technical control configures systems to enforce key policy rules automatically, giving A.5.36's compliance check a mechanism that does not depend on staff goodwill.A.5.37Documented operating proceduressupportsThis technical control enforces key policy rules automatically at the system level, one form of the documented, consistently applied operating behaviour A.5.37 requires.A.8.9Configuration managementsupportsConfiguring systems so key policy rules are enforced automatically, rather than relying on staff goodwill, is the technical layer underneath A.8.9's configuration baselines.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
Maps to Cyber Essentials
Curated mapping with the reasoning, not just the codes.
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Information security policy
The written, leadership-approved document that sets the company's security rules: what is protected, how, and who is responsible.
From the Sekit evidence catalog
This topic through the other lenses
All Governance & Risk controls
Ask Sekura: “What evidence proves RCF-0003?”
Connect your AI · free MCP
https://sekit.ai/api/mcp/crosswalk- In Claude or ChatGPT, add a custom connector and paste this URL.
- Sign in with your email to finish. Free, read-only, no organization required.