Critical Systems Cybersecurity Controls (CSCC – 1 : 2019) 2-12-1

Requirement

In addition to the subcontrols in ECC control 2-15-3, cybersecurity requirements for external web applications for the organization's critical systems must include at least the following:

Sub-Controls

2-12-1-1

Requirement: Secure session management, including session authenticity, session lockout and session timeout.

2-12-1-2

Requirement: Applying the minimum standards of Open Web Application Security Project (OWASP) Top Ten.

References

ECC – 2:2024 equivalent: 2-15-3

Need help putting this into practice? See our NCA CSCC compliance services.

See LakeRidge in action.

Talk with our team about your framework, your gaps, and the right plan.

Get a demo