Data Cybersecurity Controls (DCC – 1 : 2022) Third-Party Cybersecurity
Protects assets against cybersecurity risks related to third parties, including outsourcing, managed services and consultancy services, in line with organizational policies and related laws and regulations.
-
3-1-1
In addition to the controls in ECC subdomain 4-1, cybersecurity requirements for third-parties cybersecurity must include at least the following:
-
3-1-2
In alignment with related laws and regulations, and in addition to the applicable controls in ECC and controls within DCC domain (1), (2), and (3); cybersecurity requirements when dealing with consultancy services that works on high-sensitivity strategic projects at the national level must cover at least the following:
Need help putting this into practice? See our NCA DCC compliance services.
See LakeRidge in action.
Talk with our team about your framework, your gaps, and the right plan.
Get a demo