Non-CNI Private Sector Entities Cybersecurity Controls (NCNICC – 1 : 2025) Identity and Access Management
Protect logical access to the entity's information and technology assets by preventing unauthorized access and restricting access to business need.
-
2-2-1
[A: M | B: M] Cybersecurity requirements for identity and access management must be defined, documented and approved, covering at minimum:
-
2-2-2
[A: M | B: M] Those requirements must be implemented.
-
2-2-3
[A: M | B: R] Those requirements must be reviewed periodically.
Need help putting this into practice? See our NCA NCNICC compliance services.
See LakeRidge in action.
Talk with our team about your framework, your gaps, and the right plan.
Get a demo