Sekit CSF · Governance & Risk · Process
RCF-0005Roles & responsibilities
Security responsibilities are understood and consistently fulfilled
Mapping at a glance
RCF-0005Roles & responsibilitiesGovernance & Risk · Process
RCF-0005 maps to 9 controls across the published frameworks. +4 more in the table below. Open in the full graph →
Maps to ISO/IEC 27001:2022
Curated mapping with the reasoning, not just the codes.
A.5.2Information security roles and responsibilitiessupportsThe recurring-duty verification process turns the written role assignments into something an auditor can check, supporting A.5.2's requirement that responsibilities are exercised, not only assigned on paper.A.5.4Management responsibilitiessupportsThis process control confirms that people assigned security duties perform them on a regular, verifiable rhythm, the accountability A.5.4 asks managers to enforce.A.6.2Terms and conditions of employmentsupportsThis process control ensures the people assigned security duties perform them on a verifiable rhythm, the ongoing follow-through that gives contractual security obligations under A.6.2 practical weight.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
GV.RR-01Leadership accountability for cyber riskGV.RR-02Roles and responsibilities establishedGV.RR-03Resources allocated for cybersecurityGV.RR-04Cybersecurity in human resources
Maps to ISO/IEC 42001:2023 — Annex A
Curated mapping with the reasoning, not just the codes.
Maps to Cyber Essentials
Curated mapping with the reasoning, not just the codes.
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Security roles and responsibilities
The document or chart showing who owns each aspect of security in the company (e.g. a security org chart or a RACI matrix).
From the Sekit evidence catalog
This topic through the other lenses
All Governance & Risk controls
Ask Sekura: “What evidence proves RCF-0005?”
Also via MCP, free with account