Essential Cybersecurity Controls (ECC – 2 : 2024) 4-1-3 Requirement:
- The cybersecurity requirements for contracts and agreements with IT outsourcing and managed services third-parties must include at least the following:
- Conducting a cybersecurity risk assessment to ensure the availability of risk mitigation controls before signing contracts and agreements or upon changes in related regulatory requirements.
- Cybersecurity managed services centers for monitoring and operations must be completely present inside the Kingdom of Saudi Arabia.
Quick & Simple
Discover Our Cybersecurity Compliance Solutions:
Whether you need to meet and maintain your compliance requirements, help your clients meet them, or verify supplier compliance we have the expertise and solution for you