Critical Systems Cybersecurity Controls (CSCC – 1 : 2019) Penetration Testing
Assesses the efficiency of the organization's cybersecurity defense capabilities through simulated cyber attacks that uncover unknown weaknesses in the technical infrastructure.
-
2-10-1
In addition to the subcontrols in ECC control 2-11-3, cybersecurity requirements for penetration testing on critical systems must include at least the following:
-
2-10-2
With reference to ECC subcontrol 2-11-3-2, penetration tests must be conducted on critical systems at least once every six months.
Need help putting this into practice? See our NCA CSCC compliance services.
See LakeRidge in action.
Talk with our team about your framework, your gaps, and the right plan.
Get a demo