Requirement
With reference to ECC control 1-8-2, the implementation of CSCC must be reviewed by independent parties within the organization, outside the cybersecurity function at least once every three years.
References
- ECC – 2:2024 equivalent: 1-8-2