Critical Systems Cybersecurity Controls (CSCC – 1 : 2019) Identity and Access Management
Ensures secure and restricted logical access to information technology assets, preventing unauthorized access and allowing only access necessary for assigned tasks.
-
2-2-1
In addition to the subcontrols in ECC control 2-2-3, cybersecurity requirements for identity and access management of critical systems must include at least the following:
-
2-2-2
With reference to ECC subcontrol 2-2-3-5, user identities and access rights to critical systems must be reviewed at least once every three months.
Need help putting this into practice? See our NCA CSCC compliance services.
See LakeRidge in action.
Talk with our team about your framework, your gaps, and the right plan.
Get a demo