Essential Cybersecurity Controls (ECC – 2 : 2024) Cryptography
To ensure the proper and efficient use of cryptography to protect information assets as per organizational policies and procedures, and related laws and regulations.
-
2-8-1
Cybersecurity requirements for cryptography must be defined, documented and approved.
-
2-8-2
The cybersecurity requirements for cryptography must be implemented.
-
2-8-3
The cybersecurity requirements for cryptography must include at least the requirements in the National Cryptographic Standards; published by NCA and each national entity is required to choose and implement the appropriate cryptographic standard level based on the nature and sensitivity of the data, systems and networks to be protected, and based on the risk assessment by the entity; and as per related laws and regulations; according to the following:
-
2-8-4
The cybersecurity requirements for cryptography must be reviewed periodically.
Need help putting this into practice? See our NCA ECC compliance services or read our NCA ECC articles.
See LakeRidge in action.
Talk with our team about your framework, your gaps, and the right plan.
Get a demo