Sekit CSF · Identity & Access Management · Process

RCF-0074SSO & federation

New applications are integrated with the central identity system before deployment

Mapping at a glance

RCF-0074SSO & federationIdentity & Access Management · Process

A.5.8Information security in project managementISO/IEC 27001:2022 A.5.15Access controlISO/IEC 27001:2022 A.5.16Identity managementISO/IEC 27001:2022 PR.AA-01Identities and credentials managedNIST CSF 2.0 PR.AA-02Identities proofed and boundNIST CSF 2.0

RCF-0074 maps to 5 controls across the published frameworks. Open in the full graph →

Maps to ISO/IEC 27001:2022

Curated mapping with the reasoning, not just the codes.

A.5.8Information security in project managementsupportsThis process control connects every new application to the central identity provider before deployment, a concrete security step A.5.8 expects projects to complete.A.5.15Access controlenablesConnecting each new application to the identity provider before staff start using it means access control applies from day one instead of being retrofitted later.A.5.16Identity managementsupportsConnecting a new application to the identity provider as a routine step of adoption means it inherits the account lifecycle from day one, matching A.5.16's full-lifecycle scope.

Maps to NIST CSF 2.0

Curated mapping with the reasoning, not just the codes.

PR.AA-01Identities and credentials managed PR.AA-02Identities proofed and bound

This topic through the other lenses

All Identity & Access Management controls

Ask Sekura: “What evidence proves RCF-0074?”

Also via MCP, free with account