Sekit CSF · Governance & Risk · Policy
RCF-0028Security charter
Leadership has formally approved and sponsored the security programme
Mapping at a glance
RCF-0028Security charterGovernance & Risk · Policy
A.5.1Policies for information securityISO/IEC 27001:2022 · Annex A controlsA.5.2Information security roles and responsibilitiesISO/IEC 27001:2022 · Annex A controlsA.5.4Management responsibilitiesISO/IEC 27001:2022 · Annex A controlsGV.OC-01Organizational mission understoodNIST CSF 2.0GV.PO-01Cybersecurity policy establishedNIST CSF 2.0
RCF-0028 maps to 6 controls across the published frameworks. +1 more in the table below. Open in the full graph →
Maps to ISO/IEC 27001:2022 · Annex A controls
Curated mapping with the reasoning, not just the codes.
A.5.1Policies for information securitysupportsSekit's Security charter is part of A.5.1's topic-specific policy layer: it is a management-signed statement naming an accountable owner and granting that person a mandate to act.A.5.2Information security roles and responsibilitiessupportsThe security charter names the accountable owner and grants that person a management mandate, supporting A.5.2's requirement to document who holds overall responsibility for the security programme.A.5.4Management responsibilitiesenablesThis policy control establishes the signed charter naming an accountable security owner with a mandate to act, the foundation A.5.4's management enforcement depends on.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
GV.OC-01Organizational mission understoodGV.PO-01Cybersecurity policy establishedGV.RR-01Leadership accountability for cyber risk
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Security roles and responsibilities
The document or chart showing who owns each aspect of security in the company (e.g. a security org chart or a RACI matrix).
From the Sekit evidence catalog
This topic through the other lenses
All Governance & Risk controls
Ask Sekura: “What evidence proves RCF-0028?”
Connect your AI · free MCP
https://sekit.ai/api/mcp/crosswalk- In Claude or ChatGPT, add a custom connector and paste this URL.
- Sign in with your email to finish. Free, read-only, no organization required.