Requirement
In addition to the subcontrols in ECC control 2-3-3, cybersecurity requirements for protecting organization's social media accounts and technology assets related to them must include at least the following:
Sub-Controls
2-3-1-1
Requirement: Applying updates and security patches for social media applications at least once a month.
2-3-1-2
Requirement: Reviewing configurations and hardening of organization's social media accounts and technology assets related to them at least once a year.
2-3-1-3
Requirement: Reviewing and hardening default configurations, such as default passwords, pre-login, and lockout, for organization's social media accounts and technology assets related to them.
2-3-1-4
Requirement: Restricting activiation of features and services in social media accounts on need basis and carrying out risk assessment if there is a need to activiate it.
References
- ECC – 2:2024 equivalent: 2-3-3
