Cloud Cybersecurity Controls – Service Providers (CCC – 2 : 2024) Supply Chain and Third-Party Cybersecurity
Protects assets against cybersecurity risks from third parties, including outsourcing and managed services, per policies and related laws and regulations.
-
4-1-P-1
In addition to implementing the ECC controls 4-1-2 and 4-1-3, the CSP shall cover the following additional subcontrols for third-party cybersecurity requirements, as a minimum:
Need help putting this into practice? See our NCA CCC compliance services.
See LakeRidge in action.
Talk with our team about your framework, your gaps, and the right plan.
Get a demo