SekitCrosswalk
ENES
Empieza ahora
Sekit CSF · Familia

Data Security

24 controles en 8 temas, cada uno visto a través de las lentes de política, proceso y técnica.

Política

RCF-0091Data classificationsin mapeos aúnData is formally classified by sensitivity to determine appropriate protectionRCF-0106Data minimizationsin mapeos aúnDigital assets and sensitive data are formally inventoried and trackedRCF-0109Data retention & disposalsin mapeos aúnSecure methods are used to permanently destroy data that is no longer neededRCF-0103DLP monitoringsin mapeos aúnSensitive data is masked or anonymised where full access is not requiredRCF-0094Encryption at restsin mapeos aúnSensitive data is encrypted when stored to prevent unauthorised accessRCF-0097Encryption in transitsin mapeos aúnSensitive data is encrypted when transmitted to prevent interceptionRCF-0100Key managementsin mapeos aúnControls prevent sensitive data from leaving the organisation inappropriatelyRCF-0112Secrets managementsin mapeos aúnBackups of critical data are taken regularly and stored securely

Proceso

RCF-0092Data classificationsin mapeos aúnData classification is consistently applied when handling and sharing dataRCF-0107Data minimizationsin mapeos aúnThe data inventory is kept current and reviewed regularlyRCF-0110Data retention & disposalsin mapeos aúnSecure disposal procedures are consistently followed for all sensitive dataRCF-0104DLP monitoringsin mapeos aúnData masking is consistently applied in non-production environmentsRCF-0095Encryption at restsin mapeos aúnEncryption of stored data is consistently applied to all sensitive informationRCF-0098Encryption in transitsin mapeos aúnEncryption in transit is consistently applied to all sensitive communicationsRCF-0101Key managementsin mapeos aúnDLP rules are consistently applied to detect and block data exfiltrationRCF-0113Secrets managementsin mapeos aúnBackup procedures are consistently followed and backup integrity is verified

Técnica

RCF-0093Data classificationsin mapeos aúnTechnical controls enforce data handling rules based on classification labelsRCF-0108Data minimizationsin mapeos aúnTechnical tools automatically discover and catalogue sensitive data assetsRCF-0111Data retention & disposalsin mapeos aúnTechnical tools certify and log secure disposal of sensitive dataRCF-0105DLP monitoringsin mapeos aúnTechnical controls automatically mask sensitive data in lower environmentsRCF-0096Encryption at restsin mapeos aúnTechnical controls enforce encryption at rest on all sensitive data storesRCF-0099Encryption in transitsin mapeos aúnTechnical controls enforce encryption in transit across all channelsRCF-0102Key managementsin mapeos aúnTechnical DLP tools monitor and block unauthorised data transfersRCF-0114Secrets managementsin mapeos aúnTechnical controls automate backups and verify restoration capability
Pregúntale a Sekura: «¿Qué evidencia demuestra Data Security?»
Conecta tu IA · MCP gratis
https://staging.sekit.ai/api/mcp/crosswalk
  1. En Claude o ChatGPT, añade un conector personalizado y pega esta URL.
  2. Inicia sesión con tu correo para terminar. Gratis, de solo lectura, sin necesidad de organización.