DCC-1:2022

Data Cybersecurity Controls

National entities in scope of ECC handling classified data (Top Secret, Secret, Restricted); extends ECC.

  • Controls
  • National Cybersecurity Authority
  • 2022

At a glance

  • 66 assessable requirements
  • 3 Domains
  • 11 Subdomains
  • 19 Main controls
  • 47 Subcontrols

Structure

Assessable requirements in each main part.

  1. 1Cybersecurity Governance 13
  2. 2Cybersecurity Defense 37
  3. 3Third-Party and Cloud Computing Cybersecurity 16

Linked frameworks

Requirements linked to this framework's requirements in the CIYAJ library, stated in the texts or suggested by CIYAJ.

An independent summary prepared by CIYAJ from the published text. Always rely on the official text. CIYAJ is not affiliated with, approved or endorsed by the issuer.

See CIYAJ against your own frameworks.

Tell us which frameworks are in scope and we will arrange a walkthrough with your team.

Request a briefing