Operational Technology Cybersecurity Controls (OTCC – 1 : 2022) Third-Party Cybersecurity
Ensures organizational assets are protected against cybersecurity risks from third parties, including OT/ICS hardware and software manufacturers, product vendors and service suppliers.
-
4-1-1
In addition to the ECC subcontrols within controls 4-1-2 and 4-1-3, cybersecurity requirements for third-party cybersecurity in OT/ICS must include, at a minimum, the following:
-
4-1-2
With reference to the ECC control 4-1-4, the cybersecurity requirements for third-party cybersecurity in OT/ICS environment must be reviewed, and their implementation effectiveness is measured and evaluated periodically.
Need help putting this into practice? See our NCA OTCC compliance services.
See LakeRidge in action.
Talk with our team about your framework, your gaps, and the right plan.
Get a demo