Sekit CSF · Application Security · Process
RCF-0122Secure code review
Code reviews consistently include security checks performed by trained developers
Mapping at a glance
RCF-0122Secure code reviewApplication Security · Process
RCF-0122 maps to 4 controls across the published frameworks. Open in the full graph →
Maps to ISO/IEC 27001:2022 · Annex A controls
Curated mapping with the reasoning, not just the codes.
A.8.25Secure development life cyclesupportsThe process facet runs a security-aware peer review, performed by trained developers, on every code change rather than a general functional review.A.8.29Security testing in development and acceptancesupportsThis Sekit process control runs a security-aware peer review on every change, the human testing layer this ISO control requires alongside automated scans.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Secure development policy
The rules the development team follows to build software securely: security requirements, code review and threat modeling.
From the Sekit evidence catalog
This topic through the other lenses
All Application Security controls
Ask Sekura: “What evidence proves RCF-0122?”
Connect your AI · free MCP
https://sekit.ai/api/mcp/crosswalk- In Claude or ChatGPT, add a custom connector and paste this URL.
- Sign in with your email to finish. Free, read-only, no organization required.