Sharing Indicator: White Essential Cybersecurity Controls Table of Contents Executive Summary Introduction Objectives Scope of Work and Applicability ECC Scope of Work ECC Statement of Applicability Implementation and Compliance Evaluation and Compliance Tool Update and Review ECC Domains and Structure Main Domains Subdomains Structure The Essential Cybersecurity Controls (ECC) 1- Cybersecurity Governance 2- Cybersecurity Defense 3- Cybersecurity Resilience 4- Third-Party and Cloud Computing Cybersecurity 5- Industrial Control Systems Cybersecurity Appendices Appendix (A): Terms and Definitions Appendix (B): List of the Abbreviations 6 7 8 9 9 9 10 10 10 11 11 12 13 14 14 19 26 27 29 30 30 36 List of the Tables Table (1): ECC Structure Table (2): Terms and Definitions Table (3): List of Abbreviations 13 30 36 List of the Figures & Illustrations Figure (1): ECC Main Domains Figure (2): ECC Subdomains Figure (3): Controls Coding Scheme Figure (4): ECC Structure 11 12 13 13 Document Classification: Unclassified 5