Sekit CSF · Asset Management · Technical
RCF-0048Service inventory
Technical tools automatically map and monitor service dependencies and their security status
Mapping at a glance
RCF-0048Service inventoryAsset Management · Technical
A.5.9Inventory of information and other associated assetsISO/IEC 27001:2022A.5.22Monitoring, review and change management of supplier servicesISO/IEC 27001:2022A.8.16Monitoring activitiesISO/IEC 27001:2022ID.AM-03Network data flows mappedNIST CSF 2.0ID.AM-05Assets prioritized by criticalityNIST CSF 2.0
RCF-0048 maps to 5 controls across the published frameworks. Open in the full graph →
Maps to ISO/IEC 27001:2022
Curated mapping with the reasoning, not just the codes.
A.5.9Inventory of information and other associated assetssupportsThis technical control monitors availability and security posture of critical external services, keeping the service inventory A.5.9 requires connected to live status.A.5.22Monitoring, review and change management of supplier servicessupportsMonitoring tooling that watches uptime, certificate and domain expiry and provider status feeds supports A.5.22's ongoing visibility over supplier services, though it does not by itself perform the security review or change management the control requires.A.8.16Monitoring activitiessupportsMonitoring the availability and security posture of critical external services, including uptime and certificate expiry, is a direct instance of the monitoring A.8.16 requires.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Software and SaaS inventory
The list of installed software and cloud apps the company uses, with their licences, and a sense of which tools people use that are not officially approved.
From the Sekit evidence catalog
This topic through the other lenses
All Asset Management controls
Ask Sekura: “What evidence proves RCF-0048?”
Also via MCP, free with account