Operational Technology Cybersecurity Controls (OTCC – 1 : 2022) Cybersecurity in Change Management

• 1-5-1

  Cybersecurity requirements within the organization's OT/ICS change management must be defined, documented, and approved. The cybersecurity requirements must be a key part of the overall requirements of OT/ICS change management.

• 1-5-2

  Cybersecurity requirements within the organization's OT/ICS change management lifecycle must be implemented.

• 1-5-3

  In addition to the ECC controls 1-6-2 and 1-6-3, cybersecurity requirements in OT/ICS change management must include, at a minimum, the following:

• 1-5-4

  Cybersecurity requirements within the organization's OT/ICS change management requirements must be reviewed, and their implementation effectiveness is measured and evaluated periodically.

Need help putting this into practice? See our NCA OTCC compliance services.