SekitCrosswalk
ENES
Start free trial
Sekit CSF · Network Security · Process

RCF-0182TLS termination/hardening

TLS configurations are consistently reviewed and weak protocols or ciphers are disabled

Mapping at a glance
RCF-0182TLS termination/hardeningNetwork Security · Process
A.8.9Configuration managementISO/IEC 27001:2022 · Annex A controlsA.8.24Use of cryptographyISO/IEC 27001:2022 · Annex A controlsPR.DS-02Data-in-transit protectedNIST CSF 2.0PR.IR-01Networks protected from unauthorized accessNIST CSF 2.0

RCF-0182 maps to 4 controls across the published frameworks. Open in the full graph →

Maps to ISO/IEC 27001:2022 · Annex A controls

Curated mapping with the reasoning, not just the codes.

A.8.9Configuration managementsupportsScanning public endpoints for weak TLS protocols and expiring certificates on schedule is a configuration-drift check A.8.9 expects for network-facing services.A.8.24Use of cryptographysupportsThe process facet scans public endpoints for weak TLS protocols and expiring certificates on a recurring schedule and fixes what the scan flags.

Maps to NIST CSF 2.0

Curated mapping with the reasoning, not just the codes.

PR.DS-02Data-in-transit protectedPR.IR-01Networks protected from unauthorized access

Evidence that proves this control

What an auditor, or Sekit's evidence engine, asks for.

TLS and secure-DNS review
The proof that the company's websites and services use strong encryption (up-to-date HTTPS/TLS) and that DNS is protected against tampering.
From the Sekit evidence catalog

This topic through the other lenses

RCF-0181 PolicyRCF-0183 Technical

All Network Security controls

Network Security
Ask Sekura: “What evidence proves RCF-0182?”
Connect your AI · free MCP
https://sekit.ai/api/mcp/crosswalk
  1. In Claude or ChatGPT, add a custom connector and paste this URL.
  2. Sign in with your email to finish. Free, read-only, no organization required.