Requirement
With reference to ECC subcontrol 2-11-3-2, penetration tests must be conducted on critical systems at least once every six months.
References
- ECC – 2:2024 equivalent: 2-11-3-2
Critical Systems Cybersecurity Controls (CSCC – 1 : 2019) 2-10-2
Need help putting this into practice? See our NCA CSCC compliance services.
See LakeRidge in action.
Talk with our team about your framework, your gaps, and the right plan.
Get a demo