Data Cybersecurity Controls (DCC – 1 : 2022) 2-3-1

Requirement

In addition to the subcontrols in ECC control 2-6-3, cybersecurity requirements for mobile devices must cover at least the following:

Sub-Controls

2-3-1-1

Requirement: Centrally managing the organization's owned mobile devices using Mobile Device Management (MDM) system and activating the remote wipe feature.

2-3-1-2

Requirement: Centrally managing BYOD devices using Mobile Device Management (MDM) system and activating the remote wipe feature. At the Secret and Top Secret data classification levels, use of BYOD devices is prohibited.

References

ECC – 2:2024 equivalent: 2-6-3

Need help putting this into practice? See our NCA DCC compliance services.

See LakeRidge in action.

Talk with our team about your framework, your gaps, and the right plan.

Get a demo