ECC - 2018 - Getvisibility

Overview

The Kingdom of Saudi Arabia, as part of the Saudi Vision 2030, has developed and promulgated the Essential Cybersecurity Controls (ECC).

National Cybersecurity Authority developed the Essential Cybersecurity Controls (ECC-1: 2018) to set the minimum cybersecurity requirements for national organisations that are within its scope of ECC implementation. The Essential Cybersecurity Controls consist of the following: 5 Cybersecurity Main Domains, 29 Cybersecurity Subdomains, 114 Cybersecurity Controls. And are organised into five main domains:

Governance
Defense
Resilience
Third-Party and Cloud Computing, and ICS Cybersecurity

The document includes 114 controls designed to ensure the confidentiality, integrity and availability of an organisation’s information and technology assets. They revolve around the four pillars of people, technology, processes and strategy. These cybersecurity controls are linked to related national and international law and regulatory requirements. Government entities (and their affiliates) must comply with the above controls as stated in line with the Sudi Vision 2030.

The Challenge

One of the significant challenges in ECC 1-2018 is the understanding of your data security footprint. In summary, ECC 1-2018 is aimed to reduce the risks of cyber-attacks by using better cybersecurity practices. Eventually, what is going to be lost with a cyber-attack is data. Data is the most powerful asset in any organisation. And understanding what you store and how it is protected is one of the most fundamental aspects of improving data security posture.

The Solution

Getvisibility combines natural language processing with neural networks, optical character recognition and end-user plugins to discover and classify unstructured data across file servers and endpoint devices for a unified view. This allows for risk detection, identifies training needs, prevents data leakage and highlights process breakdown. Our system starts from analysing your company data lake footprint, by understanding what type of data do you have, who has access to it, and how it is distributed. The data footprint report includes information on:

Number of File shares and distribution
Files Found Overall and distribution
Files Classified Overall and distribution
File Basic Classified Overall
Overview of File types in number, % and their distribution
Overview of Files by Category in number and % and their distribution
Overview of Files by sub Category in number and % and their distribution
Overview of Files by Sensitivity in number and % and their distribution
Overview of Files by Risk in number and % and their distribution* (optional)

Governance Risk Compliance ECC - 2018

Our Services

Quick Links

Contact Us