Requirement
With reference to ECC control 1-8-1, the cybersecurity function in the organization must review the implementation of the Data Cybersecurity Controls periodically as specified for each data classification level. Required frequency by data classification level. Public: At least annually. Confidential: At least annually. Secret: At least annually. Top Secret: At least annually.
References
- ECC – 2:2024 equivalent: 1-8-1
