Requirement
In addition to the sub-controls within control 2-2-3 in the ECC, cybersecurity requirements for identity and access management related to telework systems shall include at least the following:
Sub-Controls
2-2-1-1
Requirement: Managing telework access rights based on need, considering the sensitivity of the systems, the level of access rights and the type of devices used by employees for telework.
2-2-1-2
Requirement: Restricting remote access for the same user from multiple computers at the same time (Concurrent Logins).
2-2-1-3
Requirement: Using secure standards to manage identities and passwords used in the telework systems.
References
- ECC – 2:2024 equivalent: 2-2-3
