CCC-2:2024
Cloud Cybersecurity Controls
Cloud Service Providers (CSP) and Cloud Service Tenants (CST) in scope; extends ECC. Applicability by hosted-data level: L1 Top Secret · L2 Secret · L3 Confidential · L4 Public.
- Controls
- National Cybersecurity Authority
- 2024
At a glance
- 175 assessable requirements
- 4 Domains
- 24 Subdomains
- 55 Main controls
- 120 Subcontrols
Structure
Assessable requirements in each main part.
- 1Cybersecurity Governance 30
- 2Cybersecurity Defense 135
- 3Cybersecurity Resilience 5
- 4Third-Party Cybersecurity 5
Linked frameworks
Requirements linked to this framework's requirements in the CIYAJ library, stated in the texts or suggested by CIYAJ.
An independent summary prepared by CIYAJ from the published text. Always rely on the official text. CIYAJ is not affiliated with, approved or endorsed by the issuer.
See CIYAJ against your own frameworks.
Tell us which frameworks are in scope and we will arrange a walkthrough with your team.