Framework library · Saudi Arabia
NCA ECC
Essential Cybersecurity Controls (ECC-2:2024). Published by National Cybersecurity Authority (NCA), version ECC-2:2024. Kapālins maps it to 4 controls. 1 of 4 controls are proved by a live signal from the platform, and 3 by the assessment.
Controls mapped
ECC-1Cybersecurity governanceAssessment
ECC-2Cybersecurity defenseLive signal
ECC-2-13Cybersecurity incident and threat managementAssessment
ECC-4Third-party and cloud computing cybersecurityAssessment
Live signal: a signal from the gateway, probes or device sensor proves it continuously. Assessment: it is evidenced by answers to the assessment. Both are exported in the regulator evidence pack.
History
How NCA ECC got here.
- Adopted
The National Cybersecurity Authority issued the Essential Cybersecurity Controls, ECC-1:2018. National Cybersecurity Authority
- Amended
NCA issued the updated Essential Cybersecurity Controls, ECC-2:2024, replacing ECC-1:2018. National Cybersecurity Authority