Requirement
In addition to Subcontrols in the ECC control 2-6-3, the CSP shall cover the following additional Subcontrols for cybersecurity requirements for mobile device security, as a minimum:
Sub-Controls
2-5-P-1-1
Requirement: Inventory of all end user and mobile devices.
2-5-P-1-2
Requirement: Centralized mobile device security management.
2-5-P-1-3
Requirement: Screen looking for end user devices.
2-5-P-1-4
Requirement: Data sanitation and secure disposal for end-user devices, especially for those with exposure to the Cloud Technology Stack.
References
- ECC – 2:2024 equivalent: 2-6-3
