CMA Cybersecurity Guidelines — Saudi Arabia | Wadira
Non-binding but examined at licensing; cloud must be in KSA.