Sekit CSF · Governance & Risk · Policy
RCF-0028Security charter
Leadership has formally approved and sponsored the security programme
Mapping at a glance
RCF-0028Security charterGovernance & Risk · Policy
RCF-0028 maps to 6 controls across the published frameworks. +1 more in the table below. Open in the full graph →
Maps to ISO/IEC 27001:2022
Curated mapping with the reasoning, not just the codes.
A.5.1Policies for information securitysupportsSekit's Security charter is part of A.5.1's topic-specific policy layer: it is a management-signed statement naming an accountable owner and granting that person a mandate to act.A.5.2Information security roles and responsibilitiessupportsThe security charter names the accountable owner and grants that person a management mandate, supporting A.5.2's requirement to document who holds overall responsibility for the security programme.A.5.4Management responsibilitiesenablesThis policy control establishes the signed charter naming an accountable security owner with a mandate to act, the foundation A.5.4's management enforcement depends on.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
GV.OC-01Organizational mission understoodGV.PO-01Cybersecurity policy establishedGV.RR-01Leadership accountability for cyber risk
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Security roles and responsibilities
The document or chart showing who owns each aspect of security in the company (e.g. a security org chart or a RACI matrix).
From the Sekit evidence catalog
This topic through the other lenses
All Governance & Risk controls
Ask Sekura: “What evidence proves RCF-0028?”
Also via MCP, free with account