Essential Cybersecurity Controls (ECC – 2 : 2024) Asset Management
To ensure that the organization has an accurate and detailed inventory of information and technology assets in order to support the organization’s cybersecurity and operational requirements to maintain the confidentiality, integrity and availability of information and technology assets.
-
2-1-1
Cybersecurity requirements for managing information and technology assets must be defined, documented and approved.
-
2-1-2
The cybersecurity requirements for managing information and technology assets must be implemented.
-
2-1-3
Acceptable use policy of information and technology assets must be defined, documented and approved.
-
2-1-4
Acceptable use policy of information and technology assets must be implemented.
-
2-1-5
Information and technology assets must be classified, labeled and handled as per related law and regulatory requirements.
-
2-1-6
The cybersecurity requirements for managing information and technology assets must be reviewed periodically.
Need help putting this into practice? See our NCA ECC compliance services or read our NCA ECC articles.
See LakeRidge in action.
Talk with our team about your framework, your gaps, and the right plan.
Get a demo