Sekit CSF · Identity & Access Management · Policy

RCF-0073SSO & federation

A centralised identity system allows secure access to all applications with one login

Mapping at a glance

RCF-0073SSO & federationIdentity & Access Management · Policy

A.5.1Policies for information securityISO/IEC 27001:2022 A.5.15Access controlISO/IEC 27001:2022 A.5.16Identity managementISO/IEC 27001:2022 PR.AA-01Identities and credentials managedNIST CSF 2.0 PR.AA-02Identities proofed and boundNIST CSF 2.0

RCF-0073 maps to 5 controls across the published frameworks. Open in the full graph →

Maps to ISO/IEC 27001:2022

Curated mapping with the reasoning, not just the codes.

A.5.1Policies for information securitysupportsSekit's SSO and federation standard, one of the topic-specific policies A.5.1 expects, requires business applications to authenticate through the central identity provider under documented exception criteria.A.5.15Access controlenablesRouting sign-in through a central identity provider gives A.5.15's access rules one place to be enforced consistently, rather than scattered across every application's own login system.A.5.16Identity managementsupportsRequiring business applications to sign in through the central identity provider is what makes every account traceable to a known person, the mapping A.5.16 asks for.

Maps to NIST CSF 2.0

Curated mapping with the reasoning, not just the codes.

PR.AA-01Identities and credentials managed PR.AA-02Identities proofed and bound

This topic through the other lenses

All Identity & Access Management controls

Ask Sekura: “What evidence proves RCF-0073?”

Also via MCP, free with account