Crosswalk de marcos Sekit CSF2 marcos Cada tema a través de tres lentes: política, proceso y técnica. Elige una familia y haz clic en cualquier control para iluminar sus mapeos.
432 controles · 20 familias · 2214 pares mapeados
Sekit CSF · Vulnerability & Configuration Crosswalk / Vulnerability & Configuration RCF-0217 Política 4 mapeados Vulnerability scanning ISO 27001 A.5.1 ISO 27001 A.8.8 NIST CSF ID.RA-01 NIST CSF ID.RA-05 RCF-0218 Proceso 4 mapeados Vulnerability scanning ISO 27001 A.5.37 ISO 27001 A.8.8 NIST CSF ID.RA-01 NIST CSF ID.RA-05 RCF-0219 Técnica 3 mapeados Vulnerability scanning ISO 27001 A.8.8 NIST CSF ID.RA-01 NIST CSF ID.RA-05 RCF-0220 Política 5 mapeados Vulnerability remediation SLAs ISO 27001 A.5.1 ISO 27001 A.8.8 NIST CSF ID.IM-02 NIST CSF ID.RA-05 NIST CSF ID.RA-07 RCF-0221 Proceso 5 mapeados Vulnerability remediation SLAs ISO 27001 A.5.37 ISO 27001 A.8.8 NIST CSF ID.IM-02 NIST CSF ID.RA-05 NIST CSF ID.RA-07 RCF-0222 Técnica 4 mapeados Vulnerability remediation SLAs ISO 27001 A.8.8 NIST CSF ID.IM-02 NIST CSF ID.RA-05 NIST CSF ID.RA-07 RCF-0223 Política 4 mapeados Configuration management ISO 27001 A.5.1 ISO 27001 A.8.9 NIST CSF PR.PS-01 NIST CSF PR.PS-02 RCF-0224 Proceso 4 mapeados Configuration management ISO 27001 A.5.36 ISO 27001 A.8.9 NIST CSF PR.PS-01 NIST CSF PR.PS-02 RCF-0225 Técnica 3 mapeados Configuration management ISO 27001 A.8.9 NIST CSF PR.PS-01 NIST CSF PR.PS-02 RCF-0226 Política 5 mapeados Baseline compliance ISO 27001 A.5.1 ISO 27001 A.8.9 NIST CSF ID.RA-01 NIST CSF PR.PS-01 NIST CSF PR.PS-02 RCF-0227 Proceso 5 mapeados Baseline compliance ISO 27001 A.5.36 ISO 27001 A.8.9 NIST CSF ID.RA-01 NIST CSF PR.PS-01 NIST CSF PR.PS-02 RCF-0228 Técnica 4 mapeados Baseline compliance ISO 27001 A.8.9 NIST CSF ID.RA-01 NIST CSF PR.PS-01 NIST CSF PR.PS-02 RCF-0229 Política 5 mapeados Patch prioritization ISO 27001 A.5.1 ISO 27001 A.8.8 NIST CSF ID.RA-05 NIST CSF ID.RA-07 NIST CSF PR.PS-02 RCF-0230 Proceso 5 mapeados Patch prioritization ISO 27001 A.5.37 ISO 27001 A.8.8 NIST CSF ID.RA-05 NIST CSF ID.RA-07 NIST CSF PR.PS-02 RCF-0231 Técnica 5 mapeados Patch prioritization ISO 27001 A.5.7 ISO 27001 A.8.8 NIST CSF ID.RA-05 NIST CSF ID.RA-07 NIST CSF PR.PS-02 RCF-0232 Política 5 mapeados Exposure management ISO 27001 A.5.1 ISO 27001 A.8.8 NIST CSF ID.RA-01 NIST CSF ID.RA-05 NIST CSF ID.RA-07 RCF-0233 Proceso 5 mapeados Exposure management ISO 27001 A.5.9 ISO 27001 A.8.8 NIST CSF ID.RA-01 NIST CSF ID.RA-05 NIST CSF ID.RA-07 RCF-0234 Técnica 5 mapeados Exposure management ISO 27001 A.8.16 ISO 27001 A.8.8 NIST CSF ID.RA-01 NIST CSF ID.RA-05 NIST CSF ID.RA-07 RCF-0235 Política 4 mapeados Penetration testing ISO 27001 A.5.1 ISO 27001 A.8.8 NIST CSF ID.RA-05 NIST CSF ID.RA-06 RCF-0236 Proceso 4 mapeados Penetration testing ISO 27001 A.8.34 ISO 27001 A.8.8 NIST CSF ID.RA-05 NIST CSF ID.RA-06 RCF-0237 Técnica 4 mapeados Penetration testing ISO 27001 A.8.31 ISO 27001 A.8.34 NIST CSF ID.RA-05 NIST CSF ID.RA-06
ISO/IEC 27001:2022 A.5.1 ISO 27001 Policies for information security A.5.7 ISO 27001 Threat intelligence A.5.9 ISO 27001 Inventory of information and other associated assets A.5.36 ISO 27001 Compliance with policies, rules and standards for information security A.5.37 ISO 27001 Documented operating procedures A.8.8 ISO 27001 Management of technical vulnerabilities A.8.9 ISO 27001 Configuration management A.8.16 ISO 27001 Monitoring activities A.8.31 ISO 27001 Separation of development, test and production environments A.8.34 ISO 27001 Protection of information systems during audit testing NIST CSF 2.0 ID.IM-02 NIST CSF Improvements from tests and exercises ID.RA-01 NIST CSF Vulnerabilities identified and recorded ID.RA-05 NIST CSF Inherent risk understood ID.RA-06 NIST CSF Risk responses chosen and tracked ID.RA-07 NIST CSF Changes and exceptions managed PR.PS-01 NIST CSF Configuration management applied PR.PS-02 NIST CSF Software maintained