Critical Systems Cybersecurity Controls (CSCC – 1 : 2019) 2-7-1

Requirement

In addition to the subcontrols in ECC control 2-8-3, cybersecurity requirements for cryptography must include at least the following:

Sub-Controls

2-7-1-1

Requirement: Encrypting all critical systems' data-in-transit.

2-7-1-2

Requirement: Encrypting all critical systems' data-at-rest at the level of files, database or certain columns within database.

2-7-1-3

Requirement: Using secure and up-to-date methods, algorithms, keys and devices in accordance with what NCA issues in this regard.

References

  1. ECC – 2:2024 equivalent: 2-8-3

Need help putting this into practice? See our NCA CSCC compliance services.

See LakeRidge in action.

Talk with our team about your framework, your gaps, and the right plan.

Get a demo

See LakeRidge in action.

Loading the booking calendar…