The National Cyber Security Authority (referred to in this document as “The Authority” or “NCA”) developed the essential Cyber Security controls (ECC – 1: 2018) after conducting a comprehensive study of multiple national and international Cyber Security frameworks and standards, studying related national decisions, law and regulatory requirements, reviewing and leveraging Cyber Security best practices, analyzing previous Cyber Security incidents and attacks on government and other critical organizations, and surveying and considering opinions of multiple national organizations.