NCA ECC
The essential controls that CCC extends.
NCA ECCCompliance service
Implement NCA CCC across your cloud environment.
Limaz scopes cloud services, clarifies provider and tenant responsibilities, designs and implements applicable controls, builds evidence, and closes priority gaps against CCC 2-2024.
What Limaz delivers
- CCC 2-2024 scope and readiness assessment
- Provider, tenant, service, and data responsibility mapping
- Cloud control architecture and secure configuration design
- Control implementation and integration support
- Evidence readiness, validation, and remediation tracking
One framework. Two operating roles.
CCC 2-2024 addresses cloud cybersecurity from the perspective of both cloud service providers and cloud service tenants. The responsibilities are related, but they are not interchangeable.
Start with your role, the services in scope, and how responsibilities divide across your organization, the provider, and other parties.
How implementation works
01
Scope the environment
Map cloud services, data, providers, tenants, and applicable NCA requirements.
02
Assign responsibility
Make every shared control explicit across provider and tenant teams.
03
Design the controls
Translate requirements into architecture, configuration, process, and ownership.
04
Build the evidence
Connect policies and controls to current, reviewable proof.
05
Close the gaps
Prioritize remediation by risk, dependency, and implementation effort.
Related services
Compliance and assurance
Assessment, evidence, and remediation delivery.
Compliance and assuranceSecurity engineering
Identity, privileged access, DevSecOps, logging, and technical controls.
Security engineeringQuestions
It is the National Cybersecurity Authority's current Cloud Cybersecurity Controls framework for cloud service providers and cloud service tenants. It extends NCA ECC for cloud computing.
Limaz assesses, designs, implements and validates the controls. The NCA is the competent authority for the framework itself.
Last reviewed: Sep 12, 2026
Official sources
Discuss your requirements with Limaz
Tell us which system, control, or requirement you are working on. We’ll review the scope and suggest the next step.