Cloud Cybersecurity Controls – Service Providers (CCC – 2 : 2024) 1-5-P-3

Requirement

Cybersecurity for change management in the CSP shall cover, as a minimum:

Sub-Controls

1-5-P-3-1

Requirement: Processes and procedures to securely implement changes (planned works) in production systems, with priority given to cybersecurity observations.

1-5-P-3-2

Requirement: Process for the implementation of cybersecurity exceptional changes (e.g.: changes during incident restoration).

Need help putting this into practice? See our NCA CCC compliance services.

See LakeRidge in action.

Talk with our team about your framework, your gaps, and the right plan.

Get a demo