NCA's Telework Cybersecurity Controls extend ECC to address secure remote working and changes in the telework environment. They support organisations in managing the cybersecurity risks of performing work remotely. See the NCA TCC publication page.
Use in a programme
Define the remote activities, users, endpoints, services and information in scope. Review the responsibilities of staff, administrators and service providers and the evidence needed to confirm that the arrangements operate as intended.
Include changes in working practices and dependencies in recurring reviews. A written remote-work policy alone does not establish that access, endpoint and information-handling controls are implemented.
Use in CSFaaS
The reviewed reference library contains NCA TCC-1:2021 - EN. Confirm the edition and relevant scope before import.
Assign requirement owners, link the policies governing remote work and attach evidence for the assessed controls. Connect significant gaps to risk assessment and follow-up work. Keep the publisher's requirements distinguishable from additional internal rules.