ECC is the mandatory national standard issued by the National Cybersecurity Authority to protect critical national infrastructure and government entities.
Consists of 5 main domains, 29 subdomains, and 114 controls covering all aspects of cybersecurity in a systematic and integrated manner.
Follows a scientific approach to cyber risk management based on global best practices and local & international threat intelligence.
Establishing strategies, policies, and defining roles & responsibilities to ensure effective cybersecurity oversight.
Implementing technical and operational controls to protect assets and information from internal and external threats.
Ensuring business continuity and rapid recovery from cyber incidents while maintaining critical services.
Managing risks associated with vendors, partners, and cloud services to ensure comprehensive security.
Protecting industrial control systems and critical facilities from specialized cyber threats.
