Operational Technology Cybersecurity Controls (OTCC – 1 : 2022) Penetration Testing
Assesses the organization's cybersecurity defense capabilities through simulated cyber-attacks that uncover unknown weaknesses in the technical infrastructure.
-
2-10-1
In addition to the subcontrols in the ECC control 2-11-3, cybersecurity requirements for penetration testing in OT/ICS must cover, at a minimum, the following:
-
2-10-2
With reference to the ECC control 2-11-4, the cybersecurity requirements for penetration testing in OT/ICS environment must be reviewed, and their implementation effectiveness is measured and evaluated periodically.
Need help putting this into practice? See our NCA OTCC compliance services.
See LakeRidge in action.
Talk with our team about your framework, your gaps, and the right plan.
Get a demo