Cloud Cybersecurity Controls – Tenants (CCC – 2 : 2024) 2-11-T-1

Requirement

In addition to subcontrols in the ECC control 2-12-3, the CST shall cover the following additional subcontrols for cybersecurity requirements for cybersecurity event logs and monitoring management, as a minimum:

Sub-Controls

2-11-T-1-1

Requirement: Activating and collecting of login event logs, and cybersecurity event logs on assets related to cloud services.

2-11-T-1-2

Requirement: Monitoring shall include all activated cybersecurity logs on the cloud services of the CST.

References

ECC – 2:2024 equivalent: 2-12-3

Need help putting this into practice? See our NCA CCC compliance services.

See LakeRidge in action.

Talk with our team about your framework, your gaps, and the right plan.

Get a demo