Sekit CSF · Familia
Secure Operations
18 controles en 6 temas, cada uno visto a través de las lentes de política, proceso y técnica.
Política
RCF-0409Availability management4 mapeosAvailability targets are formally defined for all critical services based on business requirementsRCF-0412Capacity & performance mgmt4 mapeosThe company formally plans for the capacity needed to meet current and future service demandRCF-0400Change management5 mapeosAll changes to production systems are formally required to be reviewed and approved before implementationRCF-0415Problem management5 mapeosRecurring incidents and underlying root causes are formally investigated and tracked to prevent recurrenceRCF-0403Release management6 mapeosThe company formally governs how software and configuration updates are released into productionRCF-0406SRE/Resilience practices5 mapeosThe company formally applies site reliability engineering practices to maintain and improve service resilience
Proceso
RCF-0410Availability management4 mapeosService availability is consistently monitored and availability incidents are tracked and reportedRCF-0413Capacity & performance mgmt4 mapeosCapacity and performance are consistently monitored and resource constraints are addressed before they cause outagesRCF-0401Change management6 mapeosChanges are consistently submitted, reviewed and approved through the change management processRCF-0416Problem management5 mapeosKnown problems are consistently tracked, prioritised and resolved to reduce the frequency of related incidentsRCF-0404Release management7 mapeosReleases are consistently tested, approved and deployed through a controlled release processRCF-0407SRE/Resilience practices5 mapeosReliability targets and error budgets are consistently tracked and drive decisions about feature work versus stability
Técnica
RCF-0411Availability management5 mapeosTechnical monitoring tools track uptime against availability targets and alert when services degrade or failRCF-0414Capacity & performance mgmt4 mapeosTechnical tools monitor resource utilisation, forecast capacity needs and trigger scaling when thresholds are reachedRCF-0402Change management4 mapeosTechnical tools enforce the change management workflow and block unauthorised changes to production environmentsRCF-0417Problem management6 mapeosTechnical tools identify patterns across incident records and support structured root cause analysisRCF-0405Release management5 mapeosTechnical tools automate controlled deployments and provide rollback capability if releases cause issuesRCF-0408SRE/Resilience practices6 mapeosTechnical tools monitor service level indicators and automatically trigger resilience actions when thresholds are breached
Esta familia en ISO/IEC 27001:2022
Cada elemento de marco al que mapean los controles de la familia, primero los más conectados; agrupado por familia del Sekit CSF, nunca por el índice del propio marco.
Esta familia en NIST CSF 2.0
Esta familia en ISO/IEC 42001:2023 — Annex A
Esta familia en Cyber Essentials
Pregúntale a Sekura: «¿Qué evidencia demuestra Secure Operations?»
También vía MCP, gratis con cuenta