CSCC-1:2019

Critical Systems Cybersecurity Controls

National entities owning, operating or hosting critical systems; applied per critical system; extends ECC.

  • Controls
  • National Cybersecurity Authority
  • 2019

At a glance

  • 105 assessable requirements
  • 4 Domains
  • 21 Subdomains
  • 32 Main controls
  • 73 Subcontrols

Structure

Assessable requirements in each main part.

  1. 1Cybersecurity Governance 17
  2. 2Cybersecurity Defense 78
  3. 3Cybersecurity Resilience 5
  4. 4Third-Party and Cloud Computing Cybersecurity 5

Linked frameworks

Requirements linked to this framework's requirements in the CIYAJ library, stated in the texts or suggested by CIYAJ.

An independent summary prepared by CIYAJ from the published text. Always rely on the official text. CIYAJ is not affiliated with, approved or endorsed by the issuer.

See CIYAJ against your own frameworks.

Tell us which frameworks are in scope and we will arrange a walkthrough with your team.

Request a briefing