Non-CNI Private Sector Entities Cybersecurity Controls (NCNICC – 1 : 2025) 2-9-1

Requirement

[A: M | B: M] Cybersecurity requirements for backup management must be defined, documented and approved, covering at minimum:

Sub-Controls

2-9-1-1

Requirement: [A: M | B: M] Performing backups of critical business systems periodically.

2-9-1-2

Requirement: [A: M | B: M] Periodic testing to verify the effectiveness of backup restoration.

Need help putting this into practice? See our NCA NCNICC compliance services.

See LakeRidge in action.

Talk with our team about your framework, your gaps, and the right plan.

Get a demo

See LakeRidge in action.

Loading the booking calendar…