Operational Technology Cybersecurity Controls (OTCC – 1 : 2022) Cybersecurity in Human Resources

Ensures cybersecurity risks and requirements related to OT/ICS personnel are managed efficiently before, during and after employment or separation.

1-7-1

In addition to subcontrols in the ECC control 1-9-3, cybersecurity requirements related to human resources for OT/ICS environment must include, at a minimum, screening or vetting of all personnel (including employees, contractors and subcontractors) who have access or can utilize OT/ICS assets prior to granting them access.
1-7-2

With reference to the ECC control 1-9-6, the cybersecurity requirements for cybersecurity in human resources in OT/ICS must be reviewed, and their implementation effectiveness is measured and evaluated periodically.

Need help putting this into practice? See our NCA OTCC compliance services.

See LakeRidge in action.

Talk with our team about your framework, your gaps, and the right plan.