Requirement
In addition to the subcontrols within control 1-10-3 in the ECC, the cybersecurity awareness program must cover the awareness about the potential cyber risks and threats related to the organization's social media accounts and the secure use to minimize these risks and threats, including the following:
Sub-Controls
1-4-1-1
Requirement: Secure use and protection of devices dedicated to the organization's social media accounts and ensuring that they do not contain classified data or used for personal purposes.
1-4-1-2
Requirement: Secure handling of identities, passwords and security questions.
1-4-1-3
Requirement: Organization's social media accounts restoration plan and dealing with cybersecurity incidents.
1-4-1-4
Requirement: Secure handling of applications and solutions used for the organization's social media accounts.
1-4-1-5
Requirement: Not to use the organization's social media accounts for personal purposes such as browsing.
1-4-1-6
Requirement: Avoiding accessing the organization's social media accounts using untrusted public devices or networks.
1-4-1-7
Requirement: Communicating directly with the cybersecurity department if a cybersecurity threat is suspected.
References
- ECC – 2:2024 equivalent: 1-10-3
