Essential Cybersecurity Controls (ECC – 2 : 2024) Cloud Computing And Hosting Cybersecurity
To ensure the proper and efficient remediation of cyber risks and the implementation of cybersecurity requirements related to hosting and cloud computing as per organizational policies and procedures, and related laws and regulations. it is also to ensure the protection of the organization’s information and technology assets hosted on the cloud or processed/managed by third-parties.
-
4-2-1
Cybersecurity requirements related to the use of hosting and cloud computing services must be defined, documented and approved.
-
4-2-2
The cybersecurity requirements related to the use of hosting and cloud computing services must be implemented.
-
4-2-3
In line with related and applicable laws and regulations, and in addition to the applicable ECC controls from main domains (1), (2), (3) and subdomain (4-1), the cybersecurity requirements related to the use of hosting and cloud computing services must include at least the following:
-
4-2-4
The cybersecurity requirements related to the use of hosting and cloud computing services must be reviewed periodically.
Need help putting this into practice? See our NCA ECC compliance services or read our NCA ECC articles.
See LakeRidge in action.
Talk with our team about your framework, your gaps, and the right plan.
Get a demo