Sekit CSF · Asset Management · Policy
RCF-0046Service inventory
All internal and external services the company depends on are formally required to be recorded
Mapping at a glance
RCF-0046Service inventoryAsset Management · Policy
RCF-0046 maps to 5 controls across the published frameworks. Open in the full graph →
Maps to ISO/IEC 27001:2022
Curated mapping with the reasoning, not just the codes.
A.5.9Inventory of information and other associated assetssupportsThis policy control requires every service the business depends on to be recorded with owner and criticality, extending A.5.9's inventory scope beyond hardware and software to services.A.5.19Information security in supplier relationshipsenablesRecording every service the business depends on, with owner and criticality, gives supplier risk management something concrete to act on rather than an unlisted set of relationships.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
Maps to ISO/IEC 42001:2023 — Annex A
Curated mapping with the reasoning, not just the codes.
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Software and SaaS inventory
The list of installed software and cloud apps the company uses, with their licences, and a sense of which tools people use that are not officially approved.
From the Sekit evidence catalog
This topic through the other lenses
All Asset Management controls
Ask Sekura: “What evidence proves RCF-0046?”
Also via MCP, free with account