OTCC-1:2022
Operational Technology Cybersecurity Controls
Entities owning/operating OT/ICS; applicability by facility criticality level L1 (high) · L2 · L3 from NCA’s Facility Level Identification Tool; extends ECC.
- Controls
- National Cybersecurity Authority
- 2022
At a glance
- 169 assessable requirements
- 4 Domains
- 23 Subdomains
- 47 Main controls
- 122 Subcontrols
Structure
Assessable requirements in each main part.
- 1Cybersecurity Governance 37
- 2Cybersecurity Defense 118
- 3Cybersecurity Resilience 8
- 4Third-Party Cybersecurity 6
Linked frameworks
Requirements linked to this framework's requirements in the CIYAJ library, stated in the texts or suggested by CIYAJ.
An independent summary prepared by CIYAJ from the published text. Always rely on the official text. CIYAJ is not affiliated with, approved or endorsed by the issuer.
See CIYAJ against your own frameworks.
Tell us which frameworks are in scope and we will arrange a walkthrough with your team.