Requirement
In addition to the subcontrols within control 2-6-3 in the ECC, cybersecurity requirements for mobile device security related to organization's social media accounts must include at least the following:
Sub-Controls
2-4-1-1
Requirement: Centrally manage mobile devices for organization's social media accounts using a Mobile Device Management system (MDM).
2-4-1-2
Requirement: Applying updates and security patches on mobile devices, at least once every month.
References
- ECC – 2:2024 equivalent: 2-6-3