Sekit CSF · Vulnerability & Configuration · Process

RCF-0218Vulnerability scanning

Vulnerability scans are consistently run on schedule and results are reviewed and acted upon

Mapping at a glance

RCF-0218Vulnerability scanningVulnerability & Configuration · Process

A.5.37Documented operating proceduresISO/IEC 27001:2022 · Annex A controls A.8.8Management of technical vulnerabilitiesISO/IEC 27001:2022 · Annex A controls ID.RA-01Vulnerabilities identified and recordedNIST CSF 2.0 ID.RA-05Inherent risk understoodNIST CSF 2.0

RCF-0218 maps to 4 controls across the published frameworks. Open in the full graph →

Maps to ISO/IEC 27001:2022 · Annex A controls

Curated mapping with the reasoning, not just the codes.

A.5.37Documented operating proceduressupportsThis process control runs vulnerability scans on their planned schedule and assigns findings for action, a documented recurring procedure A.5.37 expects for this operational task.A.8.8Management of technical vulnerabilitiessupportsThe process facet runs scans on schedule and assigns every relevant finding to someone for action, turning scan output into tracked work.

Maps to NIST CSF 2.0

Curated mapping with the reasoning, not just the codes.

ID.RA-01Vulnerabilities identified and recorded ID.RA-05Inherent risk understood

This topic through the other lenses

All Vulnerability & Configuration controls

Ask Sekura: “What evidence proves RCF-0218?”

Connect your AI · free MCP

https://sekit.ai/api/mcp/crosswalk

In Claude or ChatGPT, add a custom connector and paste this URL.
Sign in with your email to finish. Free, read-only, no organization required.