Essential Cybersecurity Controls (ECC – 2 : 2024) Penetration Testing
To assess and evaluate the efficiency of the organization’s cybersecurity defense capabilities through simulated cyber-attacks to discover unknown weaknesses within the technical infrastructure that may lead to a cyber breach.
-
2-11-1
Cybersecurity requirements for penetration testing exercises must be defined, documented and approved.
-
2-11-2
The cybersecurity requirements for penetration testing processes must be implemented.
-
2-11-3
The cybersecurity requirements for penetration testing processes must include at least the following:
-
2-11-4
Cybersecurity requirements for penetration testing processes must be reviewed periodically.
Need help putting this into practice? See our NCA ECC compliance services or read our NCA ECC articles.
See LakeRidge in action.
Talk with our team about your framework, your gaps, and the right plan.
Get a demo