Data Cybersecurity Controls (DCC – 1 : 2022) Periodical Cybersecurity Review and Audit
Verifies through periodic reviews and independent audits that data cybersecurity controls are implemented in compliance with organizational policies and procedures and related national and international laws, regulations and agreements.
-
1-1-1
With reference to ECC control 1-8-1, the cybersecurity function in the organization must review the implementation of the Data Cybersecurity Controls periodically as specified for each data classification level. Required frequency by data classification level. Public: At least annually. Confidential: At least annually. Secret: At least annually. Top Secret: At least annually.
-
1-1-2
With reference to ECC control 1-8-2, cybersecurity review and audit must be conducted periodically by independent parties outside the organization's cybersecurity function as specified for each data classification level. Required frequency by data classification level. Public: At least every 2 years. Confidential: At least every 2 years. Secret: At least annually. Top Secret: At least annually.
Need help putting this into practice? See our NCA DCC compliance services.
See LakeRidge in action.
Talk with our team about your framework, your gaps, and the right plan.
Get a demo