Skip to content

Organizations' Social Media Accounts Cybersecurity Controls (OSMACC – 1 : 2021) Identity and Access Management

Restrict logical access to the organization's social media accounts to authorized users only, based on business need, to prevent unauthorized access.

2-2-1

In addition to the subcontrols within control 2-2-3 in the ECC, cybersecurity requirements for identity and access management related to organization's social media accounts shall include at least the following:
2-2-2

With reference to ECC subcontrol 2-2-3-5, user identities and access rights used for organization's social media accounts must be reviewed at least once every year.

Need help putting this into practice? See our NCA OSMACC compliance services.

See LakeRidge in action.

Talk with our team about your framework, your gaps, and the right plan.