Organizations' Social Media Accounts Cybersecurity Controls (OSMACC – 1 : 2021) 1-2-1

Requirement

In addition to the controls within subdomain 1-5 in the ECC, requirements for cybersecurity risk management should include at least the following:

Sub-Controls

1-2-1-1

Requirement: Assessing cybersecurity risks for organization's social media accounts, once per year at least.

1-2-1-2

Requirement: Assessing cybersecurity risks during planning and before permitting use of organization's social media accounts.

1-2-1-3

Requirement: Including cybersecurity risks related to organization's social media accounts in the organization's cybersecurity risk register, and monitoring it at least once a year.

References

ECC – 2:2024 equivalent: 1-5

Need help putting this into practice? See our NCA OSMACC compliance services.

See LakeRidge in action.

Talk with our team about your framework, your gaps, and the right plan.

Get a demo