Wadira — Find your way through Saudi data & privacy law.

Home › Frameworks › Cybersecurity

Cybersecurity

The Anti-Cyber Crime Law and the National Cybersecurity Authority's controls and frameworks (ECC, CCC and more).

29 instruments in this framework.

Primary law — niẓām (Royal Decree, M/…)

• Anti-Cyber Crime Law — Royal Decree M/17, 2007

Rules, controls & standards

• Essential Cybersecurity Controls (ECC-2:2024) — ECC-2:2024
• NCA Cybersecurity Toolkits
• NCA Regulatory Documents (index)
• Cloud Cybersecurity Controls (CCC-2:2024) — CCC-2:2024
• Critical Systems Cybersecurity Controls
• Operational Technology Cybersecurity Controls
• Data Cybersecurity Controls
• National Cryptographic Standards
• Non-Critical National Infrastructure Cybersecurity Controls (NCNICC-1:2025) — Issued by the NCA (NCNICC-1:2025), published January 2026
• Guide to Cloud Cybersecurity Controls (CCC) Implementation
• Cybersecurity Organizational Structure Template
• Regulatory Framework for Licensing Managed Security Operations Centre Services (RFMSOC-1:2024)
• Saudi Cybersecurity Higher Education Framework (SCyber-Edu-1:2020)
• Guide to Critical Systems Cybersecurity Controls (CSCC) Implementation
• Guide to Data Cybersecurity Controls (DCC) Implementation
• Operational Technology Cybersecurity Controls — Methodology & Mapping Annex
• National Policy for Managed Security Operations Centres (NPMSOC-1:2024)
• Organizations’ Social Media Accounts Cybersecurity Controls (OSMACC-1:2021)
• Alignment Guide for the Saudi Cybersecurity Higher Education Framework (SCyber-Edu)
• Saudi Cybersecurity Workforce Framework (SCyWF-1:2020)
• Telework Cybersecurity Controls (TCC)

Guidelines & circulars

• Cybersecurity Guidelines for Internet of Things (CGIoT-1:2024)
• Guide to Organizations’ Social Media Accounts Cybersecurity Controls (OSMACC) Implementation
• Guide to Telework Cybersecurity Controls (TCC) Implementation
• Cybersecurity Guidelines for E-commerce Service Providers (CGESP-1:2019)
• Alignment Guide for the Saudi Cybersecurity Workforce Framework (SCyWF)
• Guide to Operational Technology Cybersecurity Controls (OTCC) Implementation
• Cybersecurity Guidelines for E-commerce Consumers (CGEC-1:2019)

Related instruments

• Personal Data Protection Law (PDPL)

---

Content and register data licensed CC BY 4.0 — cite the live URL. Machine-readable register (JSON) · Markdown register · Content last verified: 2026-07-27