Operational Technology Cybersecurity Controls (OTCC – 1 : 2022) 1-2-1

Requirement

In addition to the ECC subdomain 1-4, cybersecurity requirments for Cybersecurity Roles and Responsibilities in OT/ICS must include, at a minimum, the following:

Sub-Controls

1-2-1-1

Requirement: Cybersecurity roles and responsibilities (RACI) assignment for all stakeholders of the OT/ICS assets must be defined, documented, communicated and approved by the Authorizing Official while ensuring there is no conflict of interest.

1-2-1-2

Requirement: Cybersecurity roles and responsibilities related to OT/ICS assets must be assigned to the cybersecurity function in the organization.

References

ECC – 2:2024 equivalent: 1-4

Need help putting this into practice? See our NCA OTCC compliance services.

See LakeRidge in action.

Talk with our team about your framework, your gaps, and the right plan.

Get a demo