Cloud Cybersecurity Controls – Service Providers (CCC – 2 : 2024) 2-7-P-1

Requirement

In addition to Subcontrols in the ECC control 2-8-3, the CSP shall cover the following additional Subcontrols for cryptography, as a minimum:

Sub-Controls

2-7-P-1-1

Requirement: Technical mechanisms and cryptographic primitives for strong encryption, in according to the advanced level in the National Cryptographic Standards (NCS-1:2020).

2-7-P-1-2

Requirement: Certification authority and issuance capability in a secure manner, or usage of certificates from a trusted certification authority.

References

ECC – 2:2024 equivalent: 2-8-3

Need help putting this into practice? See our NCA CCC compliance services.

See LakeRidge in action.

Talk with our team about your framework, your gaps, and the right plan.

Get a demo