Essential Cybersecurity Controls (ECC – 2 : 2024) Cybersecurity Roles And Responsibilities
To ensure that roles and responsibilities are defined for all parties participating in implementing the cybersecurity controls within the organization.
-
1-4-1
Cybersecurity organizational structure and related roles and responsibilities must be defined, documented, approved, supported and assigned by the Authorizing Official while ensuring that this does not result in a conflict of interest.
-
1-4-2
The cybersecurity roles and responsibilities must be reviewed periodically according to planned intervals or upon changes to related laws and regulations.
Need help putting this into practice? See our NCA ECC compliance services or read our NCA ECC articles.
See LakeRidge in action.
Talk with our team about your framework, your gaps, and the right plan.
Get a demo