Please enable JavaScript.
Coggle requires JavaScript to display documents.
🏛️ 1 NCA ECC - Coggle Diagram
🏛️ 1 NCA ECC
2️⃣ Cybersecurity Defense 🛡️
2.1 Asset Management 💻
Hardware inventory
Software inventory
Network devices
Cloud assets
2.2 Identity & Access Management 🔐
User accounts
Authentication
MFA
Privileged Access Management
Least privilege
2.3 Information System Security 🖥️
Secure configuration
Hardening
Patch management
Change management
2.4 Network Security 🌐
Firewalls
Network segmentation
IDS/IPS
VPN security
Zero Trust concepts
2.5 Vulnerability Management 🔎
Vulnerability scanning
CVE management
CVSS scoring
Remediation tracking
2.6 Malware Protection 🦠
Antivirus
EDR
Malware analysis
Threat prevention
2.7 Security Monitoring 📊
SIEM
Log collection
Threat detection
SOC operations
Alert investigation
🎯 NCA ECC Implementation Journey
1️⃣ Identify Assets 💻
2️⃣ Perform Risk Assessment ⚠️
3️⃣ Implement Security Controls 🛡️
4️⃣ Monitor & Detect Threats 📊
5️⃣ Respond to Incidents 🚨
6️⃣ Audit Compliance 📋
7️⃣ Continuous Improvement 🔄
1️⃣ Cybersecurity Governance 🏢
1.1 Cybersecurity Strategy 📜
Define cybersecurity objectives
Align with business goals
Review and update strategy
1.2 Cybersecurity Policies 📑
Security policies
Acceptable use policy
Access control policy
Incident response policy
1.3 Cybersecurity Roles & Responsibilities 👥
CISO
Security Team
System Administrators
Users
1.4 Cybersecurity Risk Management ⚠️
Risk identification
Risk assessment
Risk treatment
Risk monitoring
1.5 Cybersecurity Awareness 🎓
Employee training
Phishing awareness
Security culture
3️⃣ Cybersecurity Resilience 🔄
3.1 Incident Response 🚨
Preparation
Detection
Containment
Eradication
Recovery
Lessons learned
3.2 Business Continuity 🏢
Disaster recovery plan
Backup strategy
Recovery objectives
Testing
3.3 Data Protection 💾
Data classification
Encryption
Backup protection
Data loss prevention
3.4 Digital Forensics 🔬
Evidence collection
Log analysis
Malware investigation
Root cause analysis
5️⃣ Cloud Cybersecurity ☁️
5.1 Cloud Governance
Cloud policies
Shared responsibility model
Cloud risk management
5.2 Cloud Identity Security 🔐
IAM
Roles
MFA
Privilege management
5.3 Cloud Data Protection 💾
Encryption
Key management
Backup
5.4 Cloud Monitoring 📈
Cloud logs
SIEM integration
CSPM
Threat detection
6️⃣ Industrial Control Systems (ICS) Cybersecurity ⚙️
6.1 OT Asset Management 🏭
PLC inventory
SCADA systems
RTU devices
Industrial networks
6.2 OT Network Security 🌐
IT/OT segmentation
Industrial firewalls
Monitoring
Secure remote access
6.3 Industrial Protocol Security 🔌
Modbus
DNP3
OPC-UA
Siemens S7
6.4 OT Incident Response 🚨
Detection
Containment
Recovery
Safety protection
4️⃣ Third Party Cybersecurity 🤝
4.1 Supplier Security Assessment 📋
Vendor risk assessment
Security requirements
Contract controls
4.2 Third Party Access Control 🔑
Remote access
Authentication
Monitoring
4.3 Third Party Monitoring 👁️
Compliance checks
Audits
Risk reviews