Skip to content

Non-CNI Private Sector Entities Cybersecurity Controls (NCNICC – 1 : 2025) Cybersecurity Risk Management

Manage cybersecurity risks methodically to protect the entity's information and technology assets.

1-3-1

[A: M | B: R] The entity's cybersecurity risk management methodology and procedures must be defined, documented and approved.
1-3-2

[A: M | B: R] The cybersecurity risk management methodology and procedures must be implemented in the entity.
1-3-3

[A: M | B: R] The cybersecurity risk management methodology and procedures must be reviewed periodically.

Need help putting this into practice? See our NCA NCNICC compliance services.

See LakeRidge in action.

Talk with our team about your framework, your gaps, and the right plan.