Non-CNI Private Sector Entities Cybersecurity Controls (NCNICC – 1 : 2025) Cloud Computing and Hosting Cybersecurity
Address cyber risks and implement cloud computing and hosting cybersecurity requirements so entity assets held with third-party providers stay protected.
-
3-2-1
[A: M | B: R] Cybersecurity requirements for the use of cloud computing and hosting services must be defined, documented and approved, ensuring compliance with relevant legislative and regulatory requirements. In addition to the applicable controls in main components (1) and (2) and subcomponent (3-1) necessary to protect the entity's data or the services provided to it, the requirements must cover at minimum:
-
3-2-2
[A: M | B: R] Those requirements must be implemented.
-
3-2-3
[A: M | B: R] Those requirements must be reviewed periodically.
Need help putting this into practice? See our NCA NCNICC compliance services.
See LakeRidge in action.
Talk with our team about your framework, your gaps, and the right plan.
Get a demo