SekitCrosswalk
ENES
Empieza ahora
Sekit CSF · Familia

Compliance & Audit

15 controles en 5 temas, cada uno visto a través de las lentes de política, proceso y técnica.

Política

RCF-0382Audit readiness5 mapeosThe company formally maintains a state of readiness to demonstrate compliance to external auditors at any timeRCF-0376Compliance calendar5 mapeosThe company formally tracks all regulatory deadlines, audit cycles and compliance obligations in a centralised scheduleRCF-0373Control evidence management8 mapeosThe company formally requires that evidence of security controls is collected and maintained for audit purposesRCF-0385Corrective action tracking4 mapeosAudit findings and compliance gaps are formally tracked as corrective actions with assigned owners and deadlinesRCF-0379Regulatory mapping5 mapeosAll regulations and frameworks applicable to the company are formally identified and mapped to internal controls

Proceso

RCF-0383Audit readiness6 mapeosAudit preparation activities are consistently completed ahead of scheduled reviews and evidence is kept currentRCF-0377Compliance calendar5 mapeosCompliance deadlines are consistently monitored and responsible owners are notified in advanceRCF-0374Control evidence management9 mapeosControl evidence is consistently gathered, labelled and stored in a way that supports audit and reviewRCF-0386Corrective action tracking4 mapeosCorrective actions are consistently progressed and status is reported until each finding is closedRCF-0380Regulatory mapping5 mapeosRegulatory requirements are consistently translated into control obligations and assigned to accountable owners

Técnica

RCF-0384Audit readiness5 mapeosTechnical tools provide real-time visibility of control status and evidence completeness to support audit readinessRCF-0378Compliance calendar4 mapeosTechnical tools manage the compliance calendar and send automated reminders for approaching deadlinesRCF-0375Control evidence management5 mapeosTechnical tools automate evidence collection and maintain an organised library of compliance artefactsRCF-0387Corrective action tracking4 mapeosTechnical tools track corrective actions, send reminders and escalate overdue items automaticallyRCF-0381Regulatory mapping5 mapeosTechnical tools maintain a live mapping between regulatory requirements and the controls that address them

Esta familia en ISO/IEC 27001:2022

Cada elemento de marco al que mapean los controles de la familia, primero los más conectados; agrupado por familia del Sekit CSF, nunca por el índice del propio marco.

A.5.36 Compliance with policies, rules and standards for information securityA.5.31 Legal, statutory, regulatory and contractual requirementsA.5.33 Protection of recordsA.5.35 Independent review of information securityA.8.15 Logging

Esta familia en NIST CSF 2.0

GV.RM-05 Lines of communication for risk establishedID.IM-04 Response and recovery plans maintainedID.IM-03 Improvements from operationsGV.OC-01 Organizational mission understoodGV.OC-05 Dependencies understoodGV.RM-06 Standardized risk method establishedGV.RM-07 Strategic opportunities characterizedGV.OC-02 Stakeholder needs understood

Esta familia en ISO/IEC 42001:2023 — Annex A

A.5.3 Documentation of AI system impact assessmentsA.6.2.3 Documentation of AI system design and developmentA.6.2.7 AI system technical documentationA.8.2 System documentation and information for users
Pregúntale a Sekura: «¿Qué evidencia demuestra Compliance & Audit?»
También vía MCP, gratis con cuenta