Requirement
With reference to ECC subcontrol 2-2-3-5, user identities and access rights to critical systems must be reviewed at least once every three months.
References
- ECC – 2:2024 equivalent: 2-2-3-5
Critical Systems Cybersecurity Controls (CSCC – 1 : 2019) 2-2-2
Need help putting this into practice? See our NCA CSCC compliance services.
See LakeRidge in action.
Talk with our team about your framework, your gaps, and the right plan.
Get a demo