Sekit CSF · Identity & Access Management · Process
RCF-0080Session management
Users consistently lock screens and log out when leaving their workstation
Mapping at a glance
RCF-0080Session managementIdentity & Access Management · Process
A.5.10Acceptable use of information and other associated assetsISO/IEC 27001:2022 · Annex A controlsA.7.7Clear desk and clear screenISO/IEC 27001:2022 · Annex A controlsPR.AA-01Identities and credentials managedNIST CSF 2.0PR.AA-02Identities proofed and boundNIST CSF 2.0PR.AA-05Access permissions managedNIST CSF 2.0
RCF-0080 maps to 6 controls across the published frameworks. +1 more in the table below. Open in the full graph →
Maps to ISO/IEC 27001:2022 · Annex A controls
Curated mapping with the reasoning, not just the codes.
A.5.10Acceptable use of information and other associated assetssupportsMaking screen-locking a habitual practice is a concrete acceptable-use behaviour for shared devices and offices, the kind of everyday handling rule A.5.10 asks organisations to set.A.7.7Clear desk and clear screensupportsThis process control makes screen locking a reinforced daily habit, the practical behavior A.7.7 is asking the company to establish and sustain.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
PR.AA-01Identities and credentials managedPR.AA-02Identities proofed and boundPR.AA-05Access permissions managed
Maps to Cyber Essentials
Curated mapping with the reasoning, not just the codes.
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Password policy and manager
The company's password rules (length, complexity, expiry) and whether a password manager is used, plus how they are technically enforced.
From the Sekit evidence catalog
This topic through the other lenses
All Identity & Access Management controls
Ask Sekura: “What evidence proves RCF-0080?”
Connect your AI · free MCP
https://sekit.ai/api/mcp/crosswalk- In Claude or ChatGPT, add a custom connector and paste this URL.
- Sign in with your email to finish. Free, read-only, no organization required.