Critical Systems Cybersecurity Controls (CSCC – 1 : 2019) Web Application Security
Ensures internet-facing web applications are protected against cyber risks.
-
2-12-1
In addition to the subcontrols in ECC control 2-15-3, cybersecurity requirements for external web applications for the organization's critical systems must include at least the following:
-
2-12-2
With reference to ECC subcontrol 2-15-3-2, multi-tier architecture principle, with minimum 3 tiers, must be used.
Need help putting this into practice? See our NCA CSCC compliance services.
See LakeRidge in action.
Talk with our team about your framework, your gaps, and the right plan.
Get a demo