Readiness assessments & control implementation
Saudi Arabia regulatory frameworks & compliance
Readiness assessments, gap analysis and implementation across Saudi cybersecurity, financial resilience, data protection, AI governance, cloud and digital government requirements.
View Jordan’s framework guide →Applicability depends on the entity, sector, services and data. These guides help scope assessments and prioritize remediation; they are not an exhaustive register of every legal or sector obligation.
NCA — Cybersecurity controls & risk
NCA ECC
Turn NCA ECC requirements into accountable governance, technical safeguards, operational evidence and a practical improvement roadmap.
Readiness & implementation →NCA CSCC
Protect critical services through NCA CSCC readiness, dependency mapping, strengthened access, monitoring and tested recovery.
Readiness & implementation →NCA CCC
Clarify provider and tenant responsibilities, cloud security architecture, evidence and NCA CCC readiness before migration or expansion.
Readiness & implementation →NCA DCC
Connect NCA DCC readiness with data discovery, classification, access, sharing, retention and verifiable protection across the lifecycle.
Readiness & implementation →NCA OTCC
Build NCA OTCC readiness around industrial visibility, safe segmentation, vendor access, monitoring and recovery without compromising operations.
Readiness & implementation →NCA NCNICC — Private-Sector Cybersecurity
NCNICC gap assessment and cybersecurity implementation support for Saudi private-sector organizations outside critical national infrastructure.
Readiness & implementation →NCA NFCRM — Cybersecurity Risk Management
Develop a defensible cyber risk register, assessment method, treatment roadmap and management evidence aligned with Saudi NCA NFCRM.
Readiness & implementation →NCA TCC — Telework Cybersecurity
Assess remote-work cybersecurity, secure access, endpoint protection and operating evidence against applicable NCA TCC requirements in Saudi Arabia.
Readiness & implementation →NCA OSMACC — Organizational Social Media Security
Protect official social media accounts through NCA OSMACC readiness, account ownership, access controls, recovery planning and incident evidence.
Readiness & implementation →NCA NCS — National Cryptographic Standards
Review encryption architecture, cryptographic use, key management and technical evidence against applicable Saudi NCA National Cryptographic Standards.
Readiness & implementation →NCA Managed SOC
Assess managed SOC regulatory readiness, provider eligibility, customer responsibilities and evidence under NCA’s national policy and licensing framework.
Readiness & implementation →SAMA — Financial-sector governance & resilience
SAMA Cyber Security Framework
Build SAMA cybersecurity readiness through accountable governance, risk management, operating controls, supplier oversight and evidence of maturity.
Readiness & implementation →SAMA IT Governance
Build SAMA IT governance readiness through a focused gap assessment, accountable IT operations, controlled change and demonstrable evidence.
Readiness & implementation →SAMA Business Continuity
Connect SAMA BCM readiness to business impact analysis, recovery priorities, disaster recovery implementation and tested service continuity.
Readiness & implementation →SAMA CRFR
Prepare for applicable SAMA CRFR expectations with practical cybersecurity foundations, resilience controls, gap assessment and licensing evidence.
Readiness & implementation →SAMA F.E.E.R.
Prepare for SAMA F.E.E.R. exercises through controlled scope, threat-informed scenarios, coordinated safeguards and accountable remediation.
Readiness & implementation →SAMA Counter-Fraud
Connect counter-fraud governance, customer journeys, identity controls and detection evidence through a focused SAMA readiness and gap assessment.
Readiness & implementation →SDAIA / NDMO — Data, privacy & responsible AI
Saudi Personal Data Protection Law — PDPL
Make personal-data protection work across your business. Connect Saudi PDPL readiness to governance, technology, evidence and day-to-day operations.
Readiness & implementation →NDMO Data Governance
Build an operational NDMO data governance program with clear ownership, data catalogs, quality controls and evidence across Saudi government data environments.
Readiness & implementation →Saudi Data Classification and Sharing
Implement Saudi data classification and controlled sharing through discovery, labels, access rules, DLP, approvals and evidence aligned with applicable SDAIA requirements.
Readiness & implementation →Saudi Open Data and Freedom of Information
Build controlled open data publication and freedom of information workflows with dataset quality, eligibility reviews, redaction, approvals and traceable records.
Readiness & implementation →SDAIA Responsible AI Governance
Turn SDAIA responsible AI references into practical AI inventories, risk assessments, oversight, evaluation and monitoring for Saudi organizations.
Readiness & implementation →CST — Cloud & sector cybersecurity
CST Cloud Regulations
Review Saudi cloud service provisioning obligations, provider arrangements, contracts and responsibilities alongside cybersecurity and privacy requirements.
Readiness & implementation →CST Cybersecurity Framework
Assess CST CRF applicability and strengthen ICT service security through control implementation, operational ownership and evidence preparation.
Readiness & implementation →DGA — Digital government & enterprise architecture
DGA Digital Transformation
Prepare for Saudi DGA digital transformation measurement with scoped assessments, accountable remediation, service architecture and organized operational evidence.
Readiness & implementation →DGA Enterprise Architecture and NORA
Build an operational enterprise architecture practice with DGA reference alignment, current and target architectures, governance, roadmaps and useful repositories.
Readiness & implementation →