Essential Cybersecurity Controls (ECC – 2 : 2024) - 2-13-1
Requirements For Cybersecurity Incidents And Threat Management Must Be Defined, Documented
And Approved.
Essential Cybersecurity Controls (ECC – 2 : 2024) - 2-13-2
The Requirements For Cybersecurity Incidents And Threat Management Must Be Implemented.
Essential Cybersecurity Controls (ECC – 2 : 2024) - 2-13-3
- The requirements for cybersecurity incidents and threat management must include at least the following:
- Cybersecurity incident response plans and escalation procedures.
- Cybersecurity incidents classification.
- Cybersecurity incidents reporting to NCA
- Sharing incidents notifications, threat intelligence, breach indicators and reports with NCA.
- Collecting and handling threat intelligence feeds.
Essential Cybersecurity Controls (ECC – 2 : 2024) - 2-13-4
The Requirements For Cybersecurity Incidents And Threat Management Must Be Reviewed
Periodically.