Essential Cybersecurity Controls (ECC – 2 : 2024) Cybersecurity Strategy
To ensure that cybersecurity plans, goals, initiatives and projects are contributing to compliance with related laws and regulations.
-
1-1-1
A cybersecurity strategy must be defined, documented and approved. It must be supported by the head of the organization or his/her delegate (referred to in this document as Authorizing Official). The strategy goals must be in-line with related laws and regulations.
-
1-1-2
A roadmap must be executed to implement the cybersecurity strategy.
-
1-1-3
The cybersecurity strategy must be reviewed periodically according to planned intervals or upon changes to related laws and regulations.
Need help putting this into practice? See our NCA ECC compliance services or read our NCA ECC articles.
See LakeRidge in action.
Talk with our team about your framework, your gaps, and the right plan.
Get a demo