Saudi NCA Compliance

Controls and Guidelines

The National Cybersecurity Authority (NCA) is mandated to develop and update policies, governance mechanisms, frameworks, standards, controls and guidelines related to cybersecurity; share them with relevant entities and follow up on their compliance.
NCA has issued a number of controls, frameworks and guidelines related to cybersecurity at the national level to enhance cybersecurity in the Kingdom in order to protect its vital interests, national security, critical infrastructure and government services.
Controls, frameworks and guidelines issued by NCA include the following:

Controls:

Frameworks and Standards:

The Saudi Cybersecurity Workforce Framework (SCyWF)

The National Cryptographic Standards (NCS)

The Saudi Cybersecurity Higher Education Framework (SCyber-Edu)

Guidelines:

Cybersecurity Guidelines for e-Commerce