Requirement
In addition to the subcontrols in the ECC control 2-9-3, cybersecurity requirements for backup and recovery management must include at least the following:
Sub-Controls
2-8-1-1
Requirement: Performing backup within planned intervals, according to the organization's risk assessment.
References
- ECC – 2:2024 equivalent: 2-9-3