Sekit CSF · Asset Management · Process
RCF-0047Service inventory
Service dependencies are consistently documented and reviewed for security and availability risk
Mapping at a glance
RCF-0047Service inventoryAsset Management · Process
A.5.9Inventory of information and other associated assetsISO/IEC 27001:2022A.5.19Information security in supplier relationshipsISO/IEC 27001:2022A.5.22Monitoring, review and change management of supplier servicesISO/IEC 27001:2022ID.AM-03Network data flows mappedNIST CSF 2.0ID.AM-05Assets prioritized by criticalityNIST CSF 2.0
RCF-0047 maps to 6 controls across the published frameworks. +1 more in the table below. Open in the full graph →
Maps to ISO/IEC 27001:2022
Curated mapping with the reasoning, not just the codes.
A.5.9Inventory of information and other associated assetssupportsThis process control maintains a current register of service dependencies with owner and criticality, reviewed for single points of failure, the currency A.5.9 expects.A.5.19Information security in supplier relationshipsenablesKeeping the service dependency register current, and reviewing it for single points of failure, is what stops A.5.19's supplier risk view from going stale as vendors change.A.5.22Monitoring, review and change management of supplier servicesenablesA current service dependency register is what A.5.22's review process checks against; without it there is no reliable list of what to monitor.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
Maps to ISO/IEC 42001:2023 — Annex A
Curated mapping with the reasoning, not just the codes.
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Software and SaaS inventory
The list of installed software and cloud apps the company uses, with their licences, and a sense of which tools people use that are not officially approved.
From the Sekit evidence catalog
This topic through the other lenses
All Asset Management controls
Ask Sekura: “What evidence proves RCF-0047?”
Also via MCP, free with account