Cloud Cybersecurity Controls – Tenants (CCC – 2 : 2024) 1-2-T-1

Requirement

Cybersecurity risk management methodology mentioned in the ECC Subdomain 1-5 shall also include for the CST, as a minimum:

Sub-Controls

1-2-T-1-1

Requirement: Defining acceptable risk levels for the cloud services.

1-2-T-1-2

Requirement: Considering data and information classification accredited by CST in cybersecurity risk management methodology.

1-2-T-1-3

Requirement: Developing cybersecurity risk register for cloud services and monitoring it periodically according to the risks.

References

  1. ECC – 2:2024 equivalent: 1-5

Need help putting this into practice? See our NCA CCC compliance services.

See LakeRidge in action.

Talk with our team about your framework, your gaps, and the right plan.

Get a demo

See LakeRidge in action.

Loading the booking calendar…