Requirement
In addition to the sub-controls within control 2-11-3 in the ECC, cybersecurity requirements for penetration testing related to telework systems shall include at least the following:
Sub-Controls
2-10-1-1
Requirement: Scope of penetration tests must cover all of the telework systems' technical components.
References
- ECC – 2:2024 equivalent: 2-11-3