Requirement
In addition to the subcontrols in the ECC control 2-7-3, cybersecurity requirements for protecting and handling data and information must include at least the following:
Sub-Controls
2-6-1-1
Requirement: Identifying classified data, according to the relevant regulations, that can be used, accessed or dealt with through telework systems.
2-6-1-2
Requirement: Protecting classified data, which was identified in control 2-6-1-1, using controls such as: not allowing the use of a specific type of classified data, or by the use of technology (e.g. Data leakage Prevention), such controls and technologies can be determined by analyzing the cyber risks of the organization.
References
- ECC – 2:2024 equivalent: 2-7-3
