During the past few years, several cybersecurity regulations have been
introduced in the Kingdom of Saudi Arabia. This has resulted in a
significant impact to government organisations and the Critical National
Infrastructure in the Kingdom, resulting in many of them having
developed cybersecurity programmes to meet the requirements of the
regulations. We have put together this cybersecurity compliance
handbook for business in the Kingdom to simplify the requirements and
help you kick-start your cybersecurity compliance journe
Key steps to an effective cybersecurity programme
Introduction to cybersecurity domains & key actions
In order to become compliant with national cybersecurity regulations in the Kingdom, number of key actions need to be taken
across three pillars - governance, people, and technology:
1. Governance related actions that focus
on organisational management and
controls enforcement measures that are
necessary to be cybersecurity compliant
2. People related actions that focus on
cybersecurity measures that are
necessary to be taken for human
resources and human capital
3.Technology related actions that focus on
the technical solutions, tools, and
mechanisms that need to be implemented
to be cybersecurity compliant