Crosswalk de marcos Sekit CSF2 marcos Cada tema a través de tres lentes: política, proceso y técnica. Elige una familia y haz clic en cualquier control para iluminar sus mapeos.
432 controles · 20 familias · 2214 pares mapeados
Sekit CSF · Application Security Crosswalk / Application Security RCF-0115 Política 3 mapeados Secure SDLC policy ISO 27001 A.5.1 ISO 27001 A.5.8 ISO 27001 A.8.25 RCF-0116 Proceso 2 mapeados Secure SDLC policy ISO 27001 A.8.25 ISO 27001 A.8.32 RCF-0117 Técnica 3 mapeados Secure SDLC policy ISO 27001 A.8.25 ISO 27001 A.8.29 ISO 27001 A.8.31 RCF-0118 Política 3 mapeados Threat modeling ISO 27001 A.8.25 ISO 27001 A.8.26 ISO 27001 A.8.27 RCF-0119 Proceso 2 mapeados Threat modeling ISO 27001 A.8.25 ISO 27001 A.8.26 RCF-0120 Técnica 2 mapeados Threat modeling ISO 27001 A.8.25 ISO 27001 A.8.26 RCF-0121 Política 3 mapeados Secure code review ISO 27001 A.5.1 ISO 27001 A.8.25 ISO 27001 A.8.29 RCF-0122 Proceso 2 mapeados Secure code review ISO 27001 A.8.25 ISO 27001 A.8.29 RCF-0123 Técnica 2 mapeados Secure code review ISO 27001 A.8.28 ISO 27001 A.8.29 RCF-0124 Política 2 mapeados SAST/DAST ISO 27001 A.5.1 ISO 27001 A.8.29 RCF-0125 Proceso 2 mapeados SAST/DAST ISO 27001 A.8.25 ISO 27001 A.8.29 RCF-0126 Técnica 2 mapeados SAST/DAST ISO 27001 A.8.25 ISO 27001 A.8.29 RCF-0127 Política 5 mapeados Dependency/SBOM management ISO 27001 A.5.1 ISO 27001 A.5.9 ISO 27001 A.8.8 Cyber Ess. CE3.1 Cyber Ess. CE3.2 RCF-0128 Proceso 4 mapeados Dependency/SBOM management ISO 27001 A.5.9 ISO 27001 A.8.8 Cyber Ess. CE3.1 Cyber Ess. CE3.2 RCF-0129 Técnica 3 mapeados Dependency/SBOM management ISO 27001 A.8.29 ISO 27001 A.8.8 Cyber Ess. CE3.2 RCF-0130 Política 3 mapeados CI/CD hardening ISO 27001 A.5.1 ISO 27001 A.8.25 ISO 27001 A.8.9 RCF-0131 Proceso 2 mapeados CI/CD hardening ISO 27001 A.8.25 ISO 27001 A.8.32 RCF-0132 Técnica 3 mapeados CI/CD hardening ISO 27001 A.8.25 ISO 27001 A.8.4 ISO 27001 A.8.9 RCF-0133 Política 3 mapeados IaC scanning ISO 27001 A.5.1 ISO 27001 A.8.25 ISO 27001 A.8.9 RCF-0134 Proceso 2 mapeados IaC scanning ISO 27001 A.8.25 ISO 27001 A.8.9 RCF-0135 Técnica 2 mapeados IaC scanning ISO 27001 A.8.29 ISO 27001 A.8.9 RCF-0136 Política 2 mapeados API security ISO 27001 A.5.1 ISO 27001 A.8.26 RCF-0137 Proceso 3 mapeados API security ISO 27001 A.8.16 ISO 27001 A.8.26 ISO 27001 A.8.29 RCF-0138 Técnica 3 mapeados API security ISO 27001 A.5.15 ISO 27001 A.8.26 ISO 27001 A.8.5 RCF-0139 Política 4 mapeados Container security ISO 27001 A.5.1 ISO 27001 A.8.25 ISO 27001 A.8.9 Cyber Ess. CE3.1 RCF-0140 Proceso 5 mapeados Container security ISO 27001 A.8.25 ISO 27001 A.8.9 Cyber Ess. CE2.1 Cyber Ess. CE3.1 Cyber Ess. CE3.2 RCF-0141 Técnica 6 mapeados Container security ISO 27001 A.8.29 ISO 27001 A.8.7 ISO 27001 A.8.9 Cyber Ess. CE3.2 Cyber Ess. CE5.1 Cyber Ess. CE5.2 RCF-0142 Política 2 mapeados DevSecOps governance ISO 27001 A.5.1 ISO 27001 A.5.2 RCF-0143 Proceso 2 mapeados DevSecOps governance ISO 27001 A.5.4 ISO 27001 A.8.25 RCF-0144 Técnica 2 mapeados DevSecOps governance ISO 27001 A.8.15 ISO 27001 A.8.16
ISO/IEC 27001:2022 A.5.1 ISO 27001 Policies for information security A.5.2 ISO 27001 Information security roles and responsibilities A.5.4 ISO 27001 Management responsibilities A.5.8 ISO 27001 Information security in project management A.5.9 ISO 27001 Inventory of information and other associated assets A.5.15 ISO 27001 Access control A.8.4 ISO 27001 Access to source code A.8.5 ISO 27001 Secure authentication A.8.7 ISO 27001 Protection against malware A.8.8 ISO 27001 Management of technical vulnerabilities A.8.9 ISO 27001 Configuration management A.8.15 ISO 27001 Logging A.8.16 ISO 27001 Monitoring activities A.8.25 ISO 27001 Secure development life cycle A.8.26 ISO 27001 Application security requirements A.8.27 ISO 27001 Secure system architecture and engineering principles A.8.28 ISO 27001 Secure coding A.8.29 ISO 27001 Security testing in development and acceptance A.8.31 ISO 27001 Separation of development, test and production environments A.8.32 ISO 27001 Change management Cyber Essentials CE2.1 Cyber Ess. Remove unnecessary accounts and software CE3.1 Cyber Ess. Use licensed and supported software CE3.2 Cyber Ess. Apply critical updates within 14 days CE5.1 Cyber Ess. Operate a malware protection mechanism CE5.2 Cyber Ess. Restrict execution to approved software