Critical Systems Cybersecurity Controls (CSCC – 1 : 2019) 2-1-1

Requirement

In addition to the controls in ECC subdomain 2-1, cybersecurity requirements for managing information technology assets must include at least the following:

Sub-Controls

2-1-1-1

Requirement: Maintaining an annually-updated inventory of critical systems' assets.

2-1-1-2

Requirement: Identifying assets owners and involving them in the asset management lifecycle for critical systems.

References

ECC – 2:2024 equivalent: 2-1

Need help putting this into practice? See our NCA CSCC compliance services.

See LakeRidge in action.

Talk with our team about your framework, your gaps, and the right plan.

Get a demo