Requirement
In addition to the sub-controls within control 2-6-3 in the ECC, cybersecurity requirements for mobile device security related to telework systems shall include at least the following:
Sub-Controls
2-5-1-1
Requirement: Central management of mobile devices and BYODs using a Mobile Device Management system (MDM).
2-5-1-2
Requirement: Applying updates and security patches on mobile devices, at least once every month.
References
- ECC – 2:2024 equivalent: 2-6-3