Essential Cybersecurity Controls (ECC – 2 : 2024) Cybersecurity Risk Management
To ensure managing cybersecurity risks in a methodological approach in order to protect the organization’s information and technology assets as per organizational policies and procedures, and related laws and regulations.
-
1-5-1
Cybersecurity risk management methodology and procedures must be defined, documented and approved as per confidentiality, integrity and availability considerations of information and technology assets.
-
1-5-2
The cybersecurity risk management methodology and procedures must be implemented by the cybersecurity function.
-
1-5-3
The cybersecurity risk assessment procedures must be implemented at least in the following cases:
-
1-5-4
The cybersecurity risk management methodology and procedures must be reviewed periodically according to planned intervals or upon changes to related laws and regulations. Changes and reviews must be approved and documented.
Need help putting this into practice? See our NCA ECC compliance services or read our NCA ECC articles.
See LakeRidge in action.
Talk with our team about your framework, your gaps, and the right plan.
Get a demo