Critical Systems Cybersecurity Controls (CSCC – 1 : 2019) 2-5-1

Requirement

In addition to the subcontrols in ECC control 2-6-3, cybersecurity requirements for mobile devices security and BYOD in the organization must include at least the following:

Sub-Controls

2-5-1-1

Requirement: Prohibting access to critical systems from mobile devices except for a temporary period only, after assessing the risks and obtaining the necessary approvals from the cybersecurity function in the organization.

2-5-1-2

Requirement: Implementing full disk encryption for mobile devices with access to critical systems.

References

ECC – 2:2024 equivalent: 2-6-3

Need help putting this into practice? See our NCA CSCC compliance services.

See LakeRidge in action.

Talk with our team about your framework, your gaps, and the right plan.

Get a demo