Requirement
With reference to the ECC control 1-3-4, OT/ICS cybersecurity policies and procedures must be reviewed periodically and/or when there is a change in the risks landscape, organizational structure, and/or process changes.
References
- ECC – 2:2024 equivalent: 1-3-4