ECC-2:2024
Essential Cybersecurity Controls
Government entities (ministries, authorities, establishments), their companies and entities, and private-sector entities owning, operating or hosting Critical National Infrastructure.
- Controls
- National Cybersecurity Authority
- 2024
At a glance
- 200 assessable requirements
- 4 Domains
- 28 Subdomains
- 108 Main controls
- 92 Subcontrols
Structure
Assessable requirements in each main part.
- 1Cybersecurity Governance 57
- 2Cybersecurity Defense 121
- 3Cybersecurity Resilience 7
- 4Third-Party and Cloud Computing Cybersecurity 15
Linked frameworks
Requirements linked to this framework's requirements in the CIYAJ library, stated in the texts or suggested by CIYAJ.
An independent summary prepared by CIYAJ from the published text. Always rely on the official text. CIYAJ is not affiliated with, approved or endorsed by the issuer.
See CIYAJ against your own frameworks.
Tell us which frameworks are in scope and we will arrange a walkthrough with your team.