Non-CNI Private Sector Entities Cybersecurity Controls (NCNICC – 1 : 2025) Systems and Information-Processing Devices Protection
Protect systems and information-processing devices, including user devices, servers and network devices, from cyber risks.
-
2-3-1
[A: M | B: M] Cybersecurity requirements for protecting the entity's systems and information-processing devices must be defined, documented and approved, covering at minimum:
-
2-3-2
[A: M | B: M] Those requirements must be implemented.
-
2-3-3
[A: M | B: R] Those requirements must be reviewed periodically.
Need help putting this into practice? See our NCA NCNICC compliance services.
See LakeRidge in action.
Talk with our team about your framework, your gaps, and the right plan.
Get a demo