Cloud Cybersecurity Controls – Service Providers (CCC – 2 : 2024) 2-13-P-1

Requirement

In addition to subcontrols in the ECC control 2-14-3, the CSP shall cover the following additional subcontrols for cybersecurity requirements for physical security, as a minimum:

Sub-Controls

2-13-P-1-1

Requirement: Continual monitoring of access to CSP's sites and buildings.

2-13-P-1-2

Requirement: Preventing unauthorized access to devices in the Cloud Technology Stack.

2-13-P-1-3

Requirement: Disposal of cloud infrastructure hardware, in particular, storage equipment (external or internal), by adopting relevant legislation and best practices.

References

ECC – 2:2024 equivalent: 2-14-3

Need help putting this into practice? See our NCA CCC compliance services.

See LakeRidge in action.

Talk with our team about your framework, your gaps, and the right plan.

Get a demo