SekitCrosswalk
ENES
Empieza ahora
Sekit CSF · Familia

Privacy

18 controles en 6 temas, cada uno visto a través de las lentes de política, proceso y técnica.

Política

RCF-0358Consent & preference mgmt4 mapeosThe company has a formal policy for capturing and managing individual consent for data processingRCF-0370Cross-border transfers5 mapeosThe company has a formal policy governing how personal data is transferred to other countriesRCF-0361Data subject rights3 mapeosFormal procedures exist for individuals to exercise their rights to access, correct or delete their dataRCF-0364Privacy by design7 mapeosPrivacy is built into new systems and processes from the startRCF-0367Privacy notices4 mapeosThe company formally provides clear and complete privacy information to individuals before collecting their dataRCF-0355Privacy risk assessments (DPIA)7 mapeosThe company formally assesses privacy risks before starting new data processing activities

Proceso

RCF-0359Consent & preference mgmt3 mapeosConsent is captured consistently before processing personal data and preferences are respectedRCF-0371Cross-border transfers5 mapeosInternational data transfers consistently use approved safeguards such as standard contractual clausesRCF-0362Data subject rights3 mapeosData subject requests are handled consistently and responded to within required timeframesRCF-0365Privacy by design7 mapeosPrivacy by design principles are consistently applied in developmentRCF-0368Privacy notices4 mapeosPrivacy notices are consistently displayed and kept current to reflect actual data processing practicesRCF-0356Privacy risk assessments (DPIA)7 mapeosPrivacy impact assessments are consistently conducted for high-risk processing and results drive decisions

Técnica

RCF-0360Consent & preference mgmt3 mapeosTechnical systems capture, store and enforce consent preferences automaticallyRCF-0372Cross-border transfers6 mapeosTechnical controls enforce approved transfer mechanisms and block unauthorised international data flowsRCF-0363Data subject rights4 mapeosTechnical systems support automated handling and tracking of data subject rights requestsRCF-0366Privacy by design6 mapeosTechnical architecture enforces privacy controls by defaultRCF-0369Privacy notices3 mapeosTechnical controls ensure privacy notices are automatically displayed at relevant data collection pointsRCF-0357Privacy risk assessments (DPIA)4 mapeosTechnical tools support automated privacy risk assessment and DPIA documentation

Esta familia en ISO/IEC 27001:2022

Cada elemento de marco al que mapean los controles de la familia, primero los más conectados; agrupado por familia del Sekit CSF, nunca por el índice del propio marco.

A.5.34 Privacy and protection of personal identifiable information (PII)A.5.14 Information transferA.8.25 Secure development life cycleA.5.31 Legal, statutory, regulatory and contractual requirementsA.8.27 Secure system architecture and engineering principlesA.8.24 Use of cryptographyA.8.10 Information deletion

Esta familia en NIST CSF 2.0

GV.PO-02 Cybersecurity policy maintainedGV.OC-03 Legal and regulatory requirements understoodPR.PS-01 Configuration management appliedPR.DS-01 Data-at-rest protectedGV.SC-06 Due diligence before engagementID.RA-01 Vulnerabilities identified and recordedGV.SC-05 Supply chain requirements in contractsGV.RM-03 Cyber risk in enterprise risk managementID.RA-03 Threats identified and recorded

Esta familia en ISO/IEC 42001:2023 — Annex A

A.6.2.2 AI system requirements and specificationA.5.2 AI system impact assessment processA.8.5 Information for interested partiesA.5.4 Assessing AI system impact on individuals or groups of individualsA.5.3 Documentation of AI system impact assessmentsA.6.1.2 Objectives for responsible development of AI systemA.6.1.3 Processes for responsible design and development of AI systems
Pregúntale a Sekura: «¿Qué evidencia demuestra Privacy?»
También vía MCP, gratis con cuenta