Data Cybersecurity Controls (DCC – 1 : 2022) Handbook

• Periodical Cybersecurity Review and Audit

  Verifies through periodic reviews and independent audits that data cybersecurity controls are implemented in compliance with organizational policies and procedures and related national and international laws, regulations and agreements.

  2 controls

• Cybersecurity in Human Resources

  Manages personnel-related cybersecurity risks and requirements for employees and contractors prior to employment, during employment and after termination or separation.

  1 control

• Cybersecurity Awareness and Training Program

  Ensures personnel are aware of their cybersecurity responsibilities and receive the awareness, training, skills and credentials needed to protect the organization's information and technology assets.

  1 control

• Identity and Access Management

  Restricts logical access to information and technology assets so unauthorized access is prevented and users receive only the access necessary to accomplish their assigned tasks.

  3 controls

• Information System and Information Processing Facilities Protection

  Protects information systems and information processing facilities, including workstations and infrastructures, against cyber risks.

  1 control

• Mobile Devices Security

  Protects mobile devices such as laptops, smartphones and tablets from cyber risks and ensures the organization's information, including sensitive information, is handled securely under BYOD usage.

  1 control

• Data and Information Protection

  Ensures the confidentiality, integrity and availability of the organization's data and information in line with organizational policies and procedures and related laws and regulations.

  1 control

• Cryptography

  Ensures the proper and efficient use of cryptography to protect information assets in line with organizational policies and procedures and related laws and regulations.

  1 control

• Secure Data Disposal

  Ensures data is disposed of securely in line with organizational policies and procedures and related laws and regulations.

  2 controls

• Cybersecurity for Printers, Scanners and Copy Machines

  Ensures data is handled securely when using printers, scanners and copy machines.

  4 controls

• Third-Party Cybersecurity

  Protects assets against cybersecurity risks related to third parties, including outsourcing, managed services and consultancy services, in line with organizational policies and related laws and regulations.

  2 controls

Need help putting this into practice? See our NCA DCC compliance services.