Essential Cybersecurity Controls (ECC – 2 : 2024) - 1-3-1
Cybersecurity Policies And Procedures Must Be Defined And Documented By The Cybersecurity
Function, Approved By The Authorizing Official, And Disseminated To Relevant Parties Inside And
Outside The Organization.
Essential Cybersecurity Controls (ECC – 2 : 2024) - 1-3-2
The Cybersecurity Function Must Ensure That The Cybersecurity Policies And Procedures Are
Implemented.
Essential Cybersecurity Controls (ECC – 2 : 2024) - 1-3-3
The Cybersecurity Policies And Procedures Must Be Supported By Technical Security Standards (e.g.,
Operating Systems, Databases And Firewall Technical Security Standards).
Essential Cybersecurity Controls (ECC – 2 : 2024) - 1-3-4
The Cybersecurity Policies And Procedures Must Be Reviewed Periodically According To Planned
Intervals Or Upon Changes To Related Laws And Regulations. Changes And Reviews Must Be Approved
And Documented.