Telework Cybersecurity Controls (TCC – 1 : 2021) Identity and Access Management
Ensures secure, restricted logical access to telework systems so that only authorized users gain the access necessary for their assigned tasks.
-
2-2-1
In addition to the sub-controls within control 2-2-3 in the ECC, cybersecurity requirements for identity and access management related to telework systems shall include at least the following:
-
2-2-2
With reference to the ECC subcontrol 2-2-3-5, user's identities and access rights used for telework must be reviewed at least once every year.
Need help putting this into practice? See our NCA TCC compliance services.
See LakeRidge in action.
Talk with our team about your framework, your gaps, and the right plan.
Get a demo