Cloud Cybersecurity Controls – Tenants (CCC – 2 : 2024) 2-6-T-1

Requirement

In addition to Subcontrols in the ECC control 2-7-3, the CST shall cover the following additional Subcontrols for cybersecurity requirements for protecting CST's data and information in cloud computing, as a minimum:

Sub-Controls

2-6-T-1-1

Requirement: Exit Strategy to ensure means for secure disposal of data on termination or expiry of the contract with the CSP.

2-6-T-1-2

Requirement: Using secure means to export and transfer data and virtual infrastructure.

References

ECC – 2:2024 equivalent: 2-7-3

Need help putting this into practice? See our NCA CCC compliance services.

See LakeRidge in action.

Talk with our team about your framework, your gaps, and the right plan.

Get a demo