Critical Systems Cybersecurity Controls (CSCC – 1 : 2019) 3-1-1

Requirement

In addition to the subcontrols in ECC control 3-1-3, cybersecurity requirements for business continuity management must include at least the following:

Sub-Controls

3-1-1-1

Requirement: Establishing a disaster recovery center for critical systems.

3-1-1-2

Requirement: Incorporating critical systems within disaster recovery plans.

3-1-1-3

Requirement: Conducting periodical tests to ensure the efficiency of disaster recovery plans for critical systems, at least once annually.

3-1-1-4

Requirement: NCA recommends conducting periodical live Disaster Recovery (DR) test for critical systems.

References

ECC – 2:2024 equivalent: 3-1-3

Need help putting this into practice? See our NCA CSCC compliance services.

See LakeRidge in action.

Talk with our team about your framework, your gaps, and the right plan.

Get a demo