Sekit CSF · Asset Management · Technical
RCF-0042Software inventory
Technical tools automatically discover installed software and flag unlicensed or unexpected applications
Mapping at a glance
RCF-0042Software inventoryAsset Management · Technical
RCF-0042 maps to 7 controls across the published frameworks. +2 more in the table below. Open in the full graph →
Maps to ISO/IEC 27001:2022
Curated mapping with the reasoning, not just the codes.
A.5.9Inventory of information and other associated assetssupportsThis technical control automatically reports installed software across endpoints and flags unlicensed or unexpected applications, keeping the software inventory current for A.5.9.A.8.9Configuration managementsupportsTooling that reports installed software and flags unlicensed or unexpected applications gives A.8.9's configuration baseline something concrete to check devices against.A.8.19Installation of software on operational systemssupportsAutomated discovery that flags unexpected, unlicensed or unapproved applications on endpoints catches the unauthorized installs A.8.19 is meant to prevent.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
Maps to Cyber Essentials
Curated mapping with the reasoning, not just the codes.
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Software and SaaS inventory
The list of installed software and cloud apps the company uses, with their licences, and a sense of which tools people use that are not officially approved.
From the Sekit evidence catalog
This topic through the other lenses
All Asset Management controls
Ask Sekura: “What evidence proves RCF-0042?”
Also via MCP, free with account