Operational Technology Cybersecurity Controls (OTCC – 1 : 2022) Cybersecurity Policies and Procedures

• 1-1-1

  With reference to the ECC controls 1-3-1 and 1-3-2, the organization must document, approve, and implement a customized set of cybersecurity policies and procedures for OT/ICS systems or assets.

• 1-1-2

  With reference to the ECC control 1-3-3, the cybersecurity OT/ICS policies and procedures must be supported by cybersecurity requirements such as vendor recommendations, implementation guidelines, and configuration management guidelines.

• 1-1-3

  With reference to the ECC control 1-3-4, OT/ICS cybersecurity policies and procedures must be reviewed periodically and/or when there is a change in the risks landscape, organizational structure, and/or process changes.

Need help putting this into practice? See our NCA OTCC compliance services.