Sekit CSF · Data Security · Policy

RCF-0112Secrets management

Backups of critical data are taken regularly and stored securely

Mapping at a glance

RCF-0112Secrets managementData Security · Policy

A.5.1Policies for information securityISO/IEC 27001:2022 A.5.17Authentication informationISO/IEC 27001:2022 PR.DS-01Data-at-rest protectedNIST CSF 2.0 PR.DS-02Data-in-transit protectedNIST CSF 2.0

RCF-0112 maps to 4 controls across the published frameworks. Open in the full graph →

Maps to ISO/IEC 27001:2022

Curated mapping with the reasoning, not just the codes.

A.5.1Policies for information securitysupportsSekit's Secrets management policy is part of A.5.1's topic-specific policy layer: it requires passwords, API keys and other credentials to live only in an approved vault, never in documents or chat.A.5.17Authentication informationsupportsRequiring every password, API key and credential to live in an approved vault supports A.5.17's authentication-information requirement by covering machine secrets, but it does not give users the guidance A.5.17 also requires on choosing and protecting their own credentials.

Maps to NIST CSF 2.0

Curated mapping with the reasoning, not just the codes.

PR.DS-01Data-at-rest protected PR.DS-02Data-in-transit protected

This topic through the other lenses

All Data Security controls

Ask Sekura: “What evidence proves RCF-0112?”

Also via MCP, free with account