Non-CNI Private Sector Entities Cybersecurity Controls (NCNICC – 1 : 2025) Periodic Cybersecurity Review and Audit
Verify through independent audit and internal review that cybersecurity controls are implemented and operating per the entity's policies and the national and international requirements binding on it.
-
1-4-1
[A: M | B: R] Cybersecurity controls must be reviewed and audited by a party independent of the entity's cybersecurity unit, per what the NCA prescribes, to assess the entity's compliance with the NCNICC.
-
1-4-2
[A: M | B: R] The entity's cybersecurity unit must review the implementation of cybersecurity controls periodically.
Need help putting this into practice? See our NCA NCNICC compliance services.
See LakeRidge in action.
Talk with our team about your framework, your gaps, and the right plan.
Get a demo