Requirement
In addition to the subcontrols in ECC control 2-8-3, cybersecurity requirements for cryptography must cover at least the following:
Sub-Controls
2-5-1-1
Requirement: Using secure and up-to-date cryptographic methods and algorithms when creating, storing, transmitting data, and for overall network communication medium; as per the requirements of the "advanced level" in the National Cryptographic Standards (NCS-1:2020).
2-5-1-2
Requirement: Using secure and up-to-date cryptographic methods and algorithms when creating, storing, transmitting data, and for overall network communication medium; as per the requirements of the "moderate level" in the National Cryptographic Standards (NCS-1:2020).
References
- ECC – 2:2024 equivalent: 2-8-3
