Sekit CSF · Application Security · Process
RCF-0122Secure code review
Code reviews consistently include security checks performed by trained developers
Mapping at a glance
RCF-0122Secure code reviewApplication Security · Process
RCF-0122 maps to 4 controls across the published frameworks. Open in the full graph →
Maps to ISO/IEC 27001:2022
Curated mapping with the reasoning, not just the codes.
A.8.25Secure development life cyclesupportsThe process facet runs a security-aware peer review, performed by trained developers, on every code change rather than a general functional review.A.8.29Security testing in development and acceptancesupportsThis Sekit process control runs a security-aware peer review on every change, the human testing layer this ISO control requires alongside automated scans.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Secure development policy
The rules the development team follows to build software securely: security requirements, code review and threat modeling.
From the Sekit evidence catalog
This topic through the other lenses
All Application Security controls
Ask Sekura: “What evidence proves RCF-0122?”
Also via MCP, free with account