Skip to content

Non-CNI Private Sector Entities Cybersecurity Controls (NCNICC – 1 : 2025) Cybersecurity Policies and Procedures

Document and communicate the entity's cybersecurity policies and ensure ongoing compliance with them.

1-2-1

[A: M | B: R] Cybersecurity policies must be defined, documented, approved and communicated to the relevant personnel in the entity.
1-2-2

[A: M | B: R] The entity's cybersecurity unit must ensure the entity's cybersecurity policies are implemented.
1-2-3

[A: M | B: R] The entity's cybersecurity unit must review the entity's cybersecurity policies periodically.

Need help putting this into practice? See our NCA NCNICC compliance services.

See LakeRidge in action.

Talk with our team about your framework, your gaps, and the right plan.