Sekit CSF · Identity & Access Management · Technical
RCF-0084Remote access
Remote connections are encrypted and restricted to approved devices only
Mapping at a glance
RCF-0084Remote accessIdentity & Access Management · Technical
RCF-0084 maps to 8 controls across the published frameworks. +3 more in the table below. Open in the full graph →
Maps to ISO/IEC 27001:2022
Curated mapping with the reasoning, not just the codes.
A.6.7Remote workingsupportsThis technical control restricts remote connections to encrypted VPN or zero-trust access from enrolled devices only, the technical backbone A.6.7 requires.A.8.5Secure authenticationsupportsThe remote-access facet restricts connections to encrypted channels on enrolled devices only, one layer of the authentication perimeter A.8.5 expects for remote access.A.8.20Networks securitysupportsRestricting remote connections to encrypted VPN or zero-trust access on enrolled devices, with no internal service directly reachable, implements the boundary control A.8.20 requires.A.8.24Use of cryptographysupportsThe remote-access facet restricts connections to encrypted VPN or zero-trust channels on enrolled devices, meeting the transmission-encryption half of A.8.24's cryptography rules.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
Maps to Cyber Essentials
Curated mapping with the reasoning, not just the codes.
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
VPN and remote access configuration
How employees connect securely to company systems when working outside the office: VPN, remote-access rules and allowed devices.
From the Sekit evidence catalog
This topic through the other lenses
All Identity & Access Management controls
Ask Sekura: “What evidence proves RCF-0084?”
Also via MCP, free with account