Essential Cybersecurity Controls (ECC – 2 : 2024) - 2-3-1

Cybersecurity Requirements For Protecting Information Systems And Information Processing Facilities Must Be Defined, Documented And Approved.
View Requirement

Essential Cybersecurity Controls (ECC – 2 : 2024) - 2-3-2

The Cybersecurity Requirements For Protecting Information Systems And Information Processing Facilities Must Be Implemented.
View Requirement

Essential Cybersecurity Controls (ECC – 2 : 2024) - 2-3-3

  1. The cybersecurity requirements for protecting information systems and information processing facilities must include at least the following:
    1. Advanced, up-to-date and secure management of malware and virus protection on servers and workstations.
    2. Restricted use and secure handling of external storage media.
    3. Patch management for information systems, software and devices.
    4. Centralized clock synchronization with an accurate and trusted source (e.g.,Saudi Standards, Metrology and Quality Organization (SASO))
View Requirement

Essential Cybersecurity Controls (ECC – 2 : 2024) - 2-3-4

The Cybersecurity Requirements For Protecting Information Systems And Information Processing Facilities Must Be Reviewed Periodically.
View Requirement