Challenges

  • Multiple, changing regulatory requirements
  • assessments that reveal gaps without a plan to close them

Scope

  • Independent compliance assessment
  • Essential Cybersecurity Controls (ECC) assessment
  • Cloud Cybersecurity Controls (CCC) assessment
  • gap-remediation plan and follow- up

Deliverables

  • Assessment and gap report
  • remediation plan
  • evidence and documentation required for regulatory assessment

Target clients

Government and semi-government entities, and organizations subject to NCA controls

Frameworks, standards & technologies

NCA ECC · NCA CCC

Value

Stronger readiness for regulatory assessments and lower risk of regulatory findings.

Success indicators (set with the client)

Share of controls implemented · number of gaps closed · result of the next self-assessment

Starting the engagement

Scope, deliverables, requirements and success indicators are agreed before delivery. Include the service name and code in your enquiry.

SAMA frameworks are covered by FT-02 in the FinTech edition.

Client requirements

The catalogue specifies no additional prerequisites for this service. Access, stakeholders and the agreed scope are confirmed before delivery.