Sekit CSF · Identity & Access Management · Process
RCF-0071Privileged access management
Privileged access is logged, time-limited and formally approved
Mapping at a glance
RCF-0071Privileged access managementIdentity & Access Management · Process
RCF-0071 maps to 6 controls across the published frameworks. +1 more in the table below. Open in the full graph →
Maps to ISO/IEC 27001:2022
Curated mapping with the reasoning, not just the codes.
A.8.2Privileged access rightssupportsApproving, time-limiting and logging privileged grants, with regular re-justification, is the day-to-day discipline that keeps A.8.2's privileged access controlled rather than only documented.A.8.15LoggingsupportsLogging every use of privileged access as part of day-to-day operation is a specific, high-value instance of the activity logging A.8.15 requires.A.8.18Use of privileged utility programssupportsApproving, time-limiting, logging and periodically re-justifying privileged access day to day is the operational discipline A.8.18 requires for tools that can override normal controls.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
Maps to Cyber Essentials
Curated mapping with the reasoning, not just the codes.
This topic through the other lenses
All Identity & Access Management controls
Ask Sekura: “What evidence proves RCF-0071?”
Also via MCP, free with account