Essential Cybersecurity Controls (ECC – 2 : 2024) Identity And Access Management
To ensure the secure and restricted logical access to information and technology assets in order to prevent unauthorized access and allow only authorized access for users which are necessary to accomplish assigned tasks.
-
2-2-1
Cybersecurity requirements for identity and access management must be defined, documented and approved.
-
2-2-2
The cybersecurity requirements for identity and access management must be implemented.
-
2-2-3
The cybersecurity requirements for identity and access management must include at least the following:
-
2-2-4
The Implementation of the cybersecurity requirements for identity and access management must be reviewed periodically.
Need help putting this into practice? See our NCA ECC compliance services or read our NCA ECC articles.
See LakeRidge in action.
Talk with our team about your framework, your gaps, and the right plan.
Get a demo