Requirement
In addition to subcontrols in the ECC control 2-13-3, the CSP shall cover the following additional subcontrols for cybersecurity requirements for cybersecurity incident and threat management, as a minimum:
Sub-Controls
2-12-P-1-1
Requirement: Subscribing in authorized and specialized entities and groups to stay up-to-date on Cybersecurity threats, common practices, and key know-how.
2-12-P-1-2
Requirement: Training for employees and third-party personnel to respond to cybersecurity incidents, in line with their roles and responsibilities.
2-12-P-1-3
Requirement: Periodically testing the incident response capability.
2-12-P-1-4
Requirement: Root Cause Analysis of cybersecurity incidents and developing plans to address them.
2-12-P-1-5
Requirement: Support the CST in cases legal proceedings and forensics, protecting the chain of custody that falls under the management and responsibility of the CSP, in accordance with the related law and regulatory requirements.
2-12-P-1-6
Requirement: Real-time reporting to the CST of incidents that may affect CST; if the incident is discovered.
2-12-P-1-7
Requirement: Support for CSTs to handle security incidents according to the agreement between the CSP and CST.
2-12-P-1-8
Requirement: Measuring and monitoring cybersecurity incident metrics and monitor compliance with contracts and legislative requirements.
References
- ECC – 2:2024 equivalent: 2-13-3
