Sekit CSF · Governance & Risk · Process
RCF-0008Risk assessment
Risk assessments are conducted regularly and drive security decisions
Mapping at a glance
RCF-0008Risk assessmentGovernance & Risk · Process
A.5.7Threat intelligenceISO/IEC 27001:2022 · Annex A controlsA.5.35Independent review of information securityISO/IEC 27001:2022 · Annex A controlsGV.RM-01Risk management objectives establishedNIST CSF 2.0GV.RM-02Risk appetite and tolerance establishedNIST CSF 2.0GV.RM-03Cyber risk in enterprise risk managementNIST CSF 2.0
RCF-0008 maps to 8 controls across the published frameworks. +3 more in the table below. Open in the full graph →
Maps to ISO/IEC 27001:2022 · Annex A controls
Curated mapping with the reasoning, not just the codes.
A.5.7Threat intelligencesupportsThis process control runs risk assessments on a regular cycle and uses the results to steer spend, the channel through which threat intelligence should change decisions.A.5.35Independent review of information securityrelatedRunning risk assessments on a regular cycle produces the input an independent reviewer checks against, though risk assessment itself is a separate activity from the review.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
GV.RM-01Risk management objectives establishedGV.RM-02Risk appetite and tolerance establishedGV.RM-03Cyber risk in enterprise risk managementID.RA-01Vulnerabilities identified and recordedID.RA-02Threat intelligence received
Maps to ISO/IEC 42001:2023 — Annex A
Curated mapping with the reasoning, not just the codes.
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Risk assessment and treatment plan
The record where the company identifies its security risks and decides what to do with each one (accept, reduce or transfer), with owners and deadlines.
From the Sekit evidence catalog
This topic through the other lenses
All Governance & Risk controls
Ask Sekura: “What evidence proves RCF-0008?”
Connect your AI · free MCP
https://sekit.ai/api/mcp/crosswalk- In Claude or ChatGPT, add a custom connector and paste this URL.
- Sign in with your email to finish. Free, read-only, no organization required.