Sekit CSF · Vulnerability & Configuration · Process

RCF-0218Vulnerability scanning

Vulnerability scans are consistently run on schedule and results are reviewed and acted upon

Mapping at a glance

RCF-0218Vulnerability scanningVulnerability & Configuration · Process

A.5.37Documented operating proceduresISO/IEC 27001:2022 A.8.8Management of technical vulnerabilitiesISO/IEC 27001:2022 ID.RA-01Vulnerabilities identified and recordedNIST CSF 2.0 ID.RA-05Inherent risk understoodNIST CSF 2.0

RCF-0218 maps to 4 controls across the published frameworks. Open in the full graph →

Maps to ISO/IEC 27001:2022

Curated mapping with the reasoning, not just the codes.

A.5.37Documented operating proceduressupportsThis process control runs vulnerability scans on their planned schedule and assigns findings for action, a documented recurring procedure A.5.37 expects for this operational task.A.8.8Management of technical vulnerabilitiessupportsThe process facet runs scans on schedule and assigns every relevant finding to someone for action, turning scan output into tracked work.

Maps to NIST CSF 2.0

Curated mapping with the reasoning, not just the codes.

ID.RA-01Vulnerabilities identified and recorded ID.RA-05Inherent risk understood

This topic through the other lenses

All Vulnerability & Configuration controls

Ask Sekura: “What evidence proves RCF-0218?”

Also via MCP, free with account