SekitCrosswalk
ENES
Start now
Sekit CSF · Privacy · Technical

RCF-0357Privacy risk assessments (DPIA)

Technical tools support automated privacy risk assessment and DPIA documentation

Mapping at a glance
RCF-0357Privacy risk assessments (DPIA)Privacy · Technical
A.5.34Privacy and protection of personal identifiable information (PII)ISO/IEC 27001:2022GV.RM-03Cyber risk in enterprise risk managementNIST CSF 2.0ID.RA-01Vulnerabilities identified and recordedNIST CSF 2.0ID.RA-03Threats identified and recordedNIST CSF 2.0

RCF-0357 maps to 4 controls across the published frameworks. Open in the full graph →

Maps to ISO/IEC 27001:2022

Curated mapping with the reasoning, not just the codes.

A.5.34Privacy and protection of personal identifiable information (PII)enablesA structured template library standardises how privacy assessments are produced and kept current, making the assessments this control requires easier to run consistently.

Maps to NIST CSF 2.0

Curated mapping with the reasoning, not just the codes.

GV.RM-03Cyber risk in enterprise risk managementID.RA-01Vulnerabilities identified and recordedID.RA-03Threats identified and recorded

Evidence that proves this control

What an auditor, or Sekit's evidence engine, asks for.

DPIA and cross-border transfer records
The privacy impact assessments done before new data processing and the records of personal-data transfers to other countries.
From the Sekit evidence catalog

This topic through the other lenses

RCF-0355 PolicyRCF-0356 Process

All Privacy controls

Privacy
Ask Sekura: “What evidence proves RCF-0357?”
Also via MCP, free with account