Requirement
In addition to the sub-controls within control 2-13-3 in the ECC, cybersecurity requirements for incident and threat management related to telework systems shall include at least the following:
Sub-Controls
2-12-1-1
Requirement: Updating cyber security incidents response plans and contact information within the organization in a way that is compatible with the telework situation and to ensure the ability to communicate and the preparedness of the incident response teams.
2-12-1-2
Requirement: Periodically obtaining and dealing with threat intelligence information related to telework systems.
2-12-1-3
Requirement: Addressing and implementing the recommendations and alerts for cyber security incidents and threats issued by the Sector regulator or by the National Cybersecurity Authority (NCA).
References
- ECC – 2:2024 equivalent: 2-13-3
