Telework Cybersecurity Controls (TCC – 1 : 2021) 2-9-1

Requirement

In addition to the subcontrols in the ECC control 2-10-3, cybersecurity requirements for technical vulnerabilities management of telework systems must include at least the following:

Sub-Controls

2-9-1-1

Requirement: Assessing vulnerabilities on technical components of telework systems, and to be classified based on criticality at least once every three months.

2-9-1-2

Requirement: Remediating vulnerabilities for telework systems, at least once every three months.

References

ECC – 2:2024 equivalent: 2-10-3

Need help putting this into practice? See our NCA TCC compliance services.

See LakeRidge in action.

Talk with our team about your framework, your gaps, and the right plan.

Get a demo