Requirement
In addition to the ECC control 1-7-1, the CST legislative and regulatory compliance should include as a minimum with the following requirements:
Sub-Controls
1-3-T-1-1
Requirement: Continuous or real-time compliance monitoring of the CSP with relevant cybersecurity legislation and contract clauses.
References
- ECC – 2:2024 equivalent: 1-7-1