Wadira: Find your way through Saudi data & privacy law.
Home › Frameworks › Cybersecurity › Guide to Operational Technology Cybersecurity Controls (OTCC) Implementation
| Type | Guideline |
|---|---|
| Issuing authority | National Cybersecurity Authority (NCA) |
| Framework | Cybersecurity |
| Tier | Guidelines & circulars |
| Legal status | Guidance |
The Guide to Operational Technology Cybersecurity Controls (OTCC) Implementation (GOTCC-1:2023) is the National Cybersecurity Authority's public implementation guide for the Operational Technology Cybersecurity Controls, which govern the security of operational technology and industrial control system (OT/ICS) environments.
The guide describes the OTCC domains and subdomains and the structure of the guideline, then provides general implementation guidance followed by guidance under the OTCC's domains in turn, from cybersecurity governance through defence to third-party cybersecurity. The OTCC themselves extend the NCA's Essential Cybersecurity Controls (ECC): applicable organisations comply with the ECC first, then with the additional OT-specific controls. The guide is complemented by the OTCC Methodology and Mapping Annex (OTCCMM-1:2022), which explains the controls' design and their mapping to international standards such as the ISA/IEC 62443 series.
Content and register data licensed CC BY 4.0. Cite the live URL. Machine-readable register (JSON) · Markdown register · Content last verified: 2026-08-13