Saudi Central Bank (SAMA)

Central bank; its Cyber Security Framework is mandatory for licensed financial institutions.

SAMA regulates licensed financial institutions. Its Cyber Security Framework (CSF) is mandatory and institutions must reach Maturity Level 4. SAMA has been delegated PDPL compliance oversight for its licensees.

Regulates: Banks (licensed) · Insurance · Finance Companies · Payment Providers

Protects: Financial Stability · Banking Customers

Official website

Instruments issued or administered (8)

Saudi Central Bank Law — Law
PAYMENT SERVICES PROVIDER REGULATIONS — Regulation
SAMA Rules on Outsourcing (Circular 2389) — Rule
Financial Consumer Protection Principles and Rules — Instrument
Cyber Resilience Fundamental Requirements (CRFR) — Instrument
SAMA 4725 — Instrument
SAMA Cyber Security Framework (CSF) — Instrument
Payment Services Provider Regulatory Guidelines — Guideline

Content and register data licensed CC BY 4.0 — cite the live URL. Machine-readable register (JSON) · Markdown register · Content last verified: 2026-07-27