Critical Systems Cybersecurity Controls (CSCC – 1 : 2019) 2-10-1

Requirement

In addition to the subcontrols in ECC control 2-11-3, cybersecurity requirements for penetration testing on critical systems must include at least the following:

Sub-Controls

2-10-1-1

Requirement: Scope of penetration tests must cover all of the critical systems' technical components and all its internal and external services.

2-10-1-2

Requirement: Conducting penetration tests by a qualified team.

References

ECC – 2:2024 equivalent: 2-11-3

Need help putting this into practice? See our NCA CSCC compliance services.

See LakeRidge in action.

Talk with our team about your framework, your gaps, and the right plan.

Get a demo