Cloud Cybersecurity Controls – Service Providers (CCC – 2 : 2024) System Development Security

Ensures the CSP's systems are developed, integrated, and deployed in a secure manner.

2-16-P-1

Cybersecurity requirements for system development within the CSP shall be identified, documented, and approved.
2-16-P-2

Cybersecurity requirements for system development within the CSP shall be applied.
2-16-P-3

Cybersecurity requirements for system development within the CSP shall include as a minimum the following controls along the development lifecycle:
2-16-P-4

Cybersecurity requirements for system development within the CSP shall be applied and reviewed periodically.

Need help putting this into practice? See our NCA CCC compliance services.

See LakeRidge in action.

Talk with our team about your framework, your gaps, and the right plan.