Wadira — Find your way through Saudi data & privacy law.

Home › Frameworks › Financial services › CMA Cybersecurity Guidelines

CMA Cybersecurity Guidelines

Type	Guideline
Code	Cybersecurity Guidelines
Issuing authority	Capital Market Authority (CMA)
Framework	Financial services
Tier	Guidelines & circulars
Legal status	Guidance

Non-binding but examined at licensing; cloud must be in KSA.

Documents

• Hosted official text (PDF, English)
• Official source (cma.gov.sa)

In this framework

• The Capital Market Law
• Saudi Central Bank Law
• PAYMENT SERVICES PROVIDER REGULATIONS
• SAMA Rules on Outsourcing (Circular 2389)
• Financial Consumer Protection Principles and Rules
• Cyber Resilience Fundamental Requirements (CRFR)
• SAMA 4725
• SAMA Cyber Security Framework (CSF)
• Payment Services Provider Regulatory Guidelines

---

Content and register data licensed CC BY 4.0 — cite the live URL. Machine-readable register (JSON) · Markdown register · Content last verified: 2026-07-27