Cloud Cybersecurity Controls – Service Providers (CCC – 2 : 2024) 1-2-P-1

Requirement

Cybersecurity risk management methodology mentioned in the ECC Subdomain 1-5, shall also include for the CSP, as a minimum:

Sub-Controls

1-2-P-1-1

Requirement: Defining acceptable risk levels for the cloud services and clarifying them to the CST if they are related to the CST.

1-2-P-1-2

Requirement: Considering data and information classification in cybersecurity risk management methodology.

1-2-P-1-3

Requirement: Developing cybersecurity risk register for cloud services and monitoring it periodically according to the risks.

References

  1. ECC – 2:2024 equivalent: 1-5

Need help putting this into practice? See our NCA CCC compliance services.

See LakeRidge in action.

Talk with our team about your framework, your gaps, and the right plan.

Get a demo

See LakeRidge in action.

Loading the booking calendar…