Cloud Cybersecurity Controls – Service Providers (CCC – 2 : 2024) 1-4-P-2

Requirement

In addition to Subcontrols in the ECC control 1-9-5, the following requirements should be in place, as a minimum, for the termination/completion of a human resource's professional relationship with the CSP:

Sub-Controls

1-4-P-2-1

Requirement: Assurance that assets owned by the entity (especially those with security exposure) are accounted for and returned upon termination.

References

ECC – 2:2024 equivalent: 1-9-5

Need help putting this into practice? See our NCA CCC compliance services.

See LakeRidge in action.

Talk with our team about your framework, your gaps, and the right plan.

Get a demo