Essential Cybersecurity Controls (ECC – 2 : 2024) Cybersecurity Incident And Threat Management
To ensure timely identification, detection, effective management and handling of cybersecurity incidents and threats to prevent or minimize negative impacts on organization’s operation taking into consideration the royal decree number 37140, dated 14/8/1438h.
-
2-13-1
Requirements for cybersecurity incidents and threat management must be defined, documented and approved.
-
2-13-2
The requirements for cybersecurity incidents and threat management must be implemented.
-
2-13-3
The requirements for cybersecurity incidents and threat management must include at least the following:
-
2-13-4
The requirements for cybersecurity incidents and threat management must be reviewed periodically.
Need help putting this into practice? See our NCA ECC compliance services or read our NCA ECC articles.
See LakeRidge in action.
Talk with our team about your framework, your gaps, and the right plan.
Get a demo