NCSA Announces - Updates to Advisory Service Accreditation

Sunday, June 30, 2024

The National Cyber Security Agency (NCSA) is pleased to announce a minor update to the National Information Security Compliance Framework (NISCF) Advisory Service Accreditation. This update reflects the dynamic growth in the cybersecurity landscape and addresses the increasing assurance needs for service providers.

Effective July 30, 2024, all service providers seeking or maintaining the Advisory Accreditation will be required to follow the updated Advisory Accreditation Requirements and associated standards.

Key highlights of the update include:

  1. Simplified Control Requirements: The updated accreditation process simplifies the existing control requirements, making it easier for service providers to comply while maintaining robust security standards.
  2. Comprehensive Documentation: The new release includes detailed documentation designed to guide organizations throughout the process of obtaining Advisory Service Accreditation. This documentation provides step-by-step instructions, best practices, and examples to ensure a smooth and efficient accreditation process.
  3. Enhanced Service Terminology: The update introduces a refined set of service terminologies (Taxonomy Document for Accreditation ) that align with current service policies. This ensures clarity and consistency in the language used, facilitating better understanding and implementation of the accreditation requirements.
  4. Assurance Principles and Service Objectives: The new  Accreditation  Standard emphasizes key assurance principles and overall service objectives, ensuring that accredited advisory services meet the highest standards of security and reliability.

These enhancements are aimed at strengthening the cybersecurity posture of service providers, ensuring they can effectively address the evolving cyber landscape while maintaining compliance with national security standards.