Essential Cybersecurity Controls (ECC – 2 : 2024) Cybersecurity In Information And Technology Project Management
To ensure that cybersecurity requirements are included in project management methodology and procedures in order to protect the confidentiality, integrity and availability of information and technology assets as per organization policies and procedures, and related laws and regulations.
-
1-6-1
Cybersecurity requirements must be included in project and asset (information/technology) change management methodology and procedures to identify and manage cybersecurity risks as part of project management lifecycle. The cybersecurity requirements must be a key part of the overall requirements of technology projects.
-
1-6-2
The cybersecurity requirements in project and assets (information/technology) change management must include at least the following:
-
1-6-3
The cybersecurity requirements related to software and application development projects must include at least the following:
-
1-6-4
The cybersecurity requirements in project management must be reviewed periodically.
Need help putting this into practice? See our NCA ECC compliance services or read our NCA ECC articles.
See LakeRidge in action.
Talk with our team about your framework, your gaps, and the right plan.
Get a demo