The Essential Cybersecurity Controls set the minimum cybersecurity requirements for government entities, organizations that own or operate critical national infrastructure, and their service providers. The 2024 edition updates the structure and expectations of the original controls.
We assess your compliance with each control, document the evidence, and build a remediation plan with owners and dates. We then support you through the NCA self-assessment and any follow-up, and help you keep compliance current as your environment changes.
Why it matters
Control-by-control compliance status with evidence
A remediation plan with owners, dates and effort
Policies and procedures aligned to the 2024 controls
Support through the NCA self-assessment
A baseline you can re-measure every year
How the engagement runs
- 1DiscoverScope, regulatory obligations and current posture.
- 2AssessEvidence-based gap and maturity assessment.
- 3PlanA prioritized, costed remediation roadmap.
- 4ImplementControls, policies and processes delivered.
- 5SustainMonitoring, reporting and re-assessment.
What you receive
- Compliance assessment report
- Remediation plan and tracker
- Policy and procedure set
- Self-assessment submission support
- Executive summary
Questions
We complied with ECC-1:2018. What changes with ECC-2:2024?
The structure and several requirements changed. We map your existing compliance to the new controls so you only address what is actually new or different.