Critical Systems Cybersecurity Controls (CSCC – 1 : 2019) Vulnerabilities Management
Ensures timely detection and effective remediation of technical vulnerabilities to prevent or minimize their exploitation in cyber attacks against the organization.
-
2-9-1
In addition to the subcontrols in ECC control 2-10-3, cybersecurity requirements for technical vulnerabilities management of critical systems must include at least the following:
-
2-9-2
With reference to ECC subcontrol 2-10-3-1, vulnerabilities assessments must be conducted on critical systems' technical components at least once every month.
Need help putting this into practice? See our NCA CSCC compliance services.
See LakeRidge in action.
Talk with our team about your framework, your gaps, and the right plan.
Get a demo