Sekit CSF · Application Security · Technical
RCF-0123Secure code review
Automated tools scan code for security vulnerabilities as part of the development workflow
Mapping at a glance
RCF-0123Secure code reviewApplication Security · Technical
RCF-0123 maps to 4 controls across the published frameworks. Open in the full graph →
Maps to ISO/IEC 27001:2022
Curated mapping with the reasoning, not just the codes.
A.8.28Secure codingsupportsThis Sekit technical control wires an automated scanner into the development workflow to catch common flaws in every change, the concrete secure coding practice this ISO control requires.A.8.29Security testing in development and acceptancesupportsThe Sekit technical control wires an automated scanner into the workflow to catch flaws on every change, one of the automated testing methods this ISO control requires.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Secure development policy
The rules the development team follows to build software securely: security requirements, code review and threat modeling.
From the Sekit evidence catalog
This topic through the other lenses
All Application Security controls
Ask Sekura: “What evidence proves RCF-0123?”
Also via MCP, free with account