Governance, Risk & Compliance
NCA ECC Compliance in Saudi Arabia
Implementation and audit readiness for the NCA Essential Cybersecurity Controls, for organizations in Saudi Arabia. Delivery is remote from Sheikh Zayed City, Giza, Egypt, with travel when needed.
Why it matters
NCA ECC compliance in Saudi Arabia means implementation and audit readiness for the NCA essential cybersecurity controls. Government and critical infrastructure are the sectors named on this page.
Delivery is remote from Sheikh Zayed City, Giza, Egypt, with travel when needed. This page does not claim a Saudi office or a Saudi entity.
What is in scope
- vCISO
- Cyber risk assessment
- Gap assessment and audit readiness
- Policy and procedure development
- Third-party risk
- Business continuity and DR planning
How it runs
- 01
Assess the risk
A cyber risk assessment of the systems this engagement covers.
- 02
Assess the gap
Record what is ready for an audit and what is still open.
- 03
Write it down
Policies, procedures, and the risk decisions, in language staff can follow.
- 04
Prepare the evidence
The work is implementation and audit readiness for the review.
What you receive
- A gap assessment
- Policies and procedures staff can follow
- A cyber risk assessment with named owners
- Support while you prepare for the review
Who it is for
Government and public sector, and industry, manufacturing, and critical infrastructure, where the NCA Essential Cybersecurity Controls apply.
Industry, manufacturing, and critical infrastructure
Testing and monitoring planned so a production environment stays up, including OT/ICS where that is in scope. NCA ECC is named where that obligation applies.
Government and public sector
Governance, monitoring, and training for public bodies. The NCA Essential Cybersecurity Controls are named where that obligation applies.
Questions
Frequently asked questions
Where is this engagement delivered?
This engagement applies in Saudi Arabia. Delivery is remote from our office in Sheikh Zayed City, Giza, Egypt, with travel when needed. We do not claim a Saudi office or a Saudi entity.
Who issues the formal result when a review requires one?
Certification is issued by an accredited certification body, and this company does not certify the client.
Talk to our security experts
Discuss Governance, Risk & Compliance with a specialist.
A short brief is enough: the environment, the deadline, and whether you need a test, a control program, or coverage for the team.