Essential Cybersecurity Controls (ECC – 2 : 2024) Data And Information Protection
To ensure the confidentiality, integrity and availability of organization’s data and information as per organizational policies and procedures, and related laws and regulations.
-
2-7-1
Cybersecurity requirements for protecting and handling data and information must be defined, documented and approved as per the related laws and regulations.
-
2-7-2
The cybersecurity requirements for protecting and handling data and information must be implemented.
-
2-7-3
The cybersecurity requirements for protecting and handling data and information must include at least the applicable requirements in Data Cybersecurity Controls published by NCA.
-
2-7-4
The cybersecurity requirements for protecting and handling data and information must be reviewed periodically.
Need help putting this into practice? See our NCA ECC compliance services or read our NCA ECC articles.
See LakeRidge in action.
Talk with our team about your framework, your gaps, and the right plan.
Get a demo