Non-CNI Private Sector Entities Cybersecurity Controls (NCNICC – 1 : 2025) Data and Information Protection
Ensure the confidentiality, integrity, accuracy and availability of the entity's data per its policies and the applicable legislative and regulatory requirements.
-
2-7-1
[A: M | B: M] Cybersecurity requirements for protecting and handling the entity's data and information per relevant legislative and regulatory requirements must be defined, documented and approved, covering at minimum:
-
2-7-2
[A: M | B: M] Those requirements must be implemented, according to the data's classification level.
-
2-7-3
[A: M | B: R] Those requirements must be reviewed periodically.
Need help putting this into practice? See our NCA NCNICC compliance services.
See LakeRidge in action.
Talk with our team about your framework, your gaps, and the right plan.
Get a demo