Wadira: Find your way through Saudi data & privacy law.
Home › Frameworks › Cybersecurity › Guide to Telework Cybersecurity Controls (TCC) Implementation
| Type | Guideline |
|---|---|
| Issuing authority | National Cybersecurity Authority (NCA) |
| Framework | Cybersecurity |
| Tier | Guidelines & circulars |
| Legal status | Guidance |
The Guide to Telework Cybersecurity Controls Implementation (GTCC-1:2023) is the National Cybersecurity Authority's public implementation guide for the Telework Cybersecurity Controls (TCC-1:2021), which set the minimum cybersecurity requirements for operating telework securely.
The guide sets out the TCC domains and subdomains: cybersecurity governance (policies and procedures, risk management, and awareness and training), cybersecurity defence (spanning asset management, identity and access management, protection of information systems and processing facilities, network security, mobile-device security, data and information protection, cryptography, backup and recovery, vulnerability management, penetration testing, event-log monitoring, and incident and threat management) and third-party and cloud computing cybersecurity, and explains the guideline's structure before giving general and then domain-by-domain implementation guidance. It supports the TCC's compliance model, under which continuous compliance with the Essential Cybersecurity Controls (ECC) is a prerequisite.
Content and register data licensed CC BY 4.0. Cite the live URL. Machine-readable register (JSON) · Markdown register · Content last verified: 2026-08-13