Wadira: Find your way through Saudi data & privacy law.
Home › Frameworks › Cybersecurity › National Policy for Managed Security Operations Centres (NPMSOC-1:2024)
| Type | Instrument |
|---|---|
| Issuing authority | National Cybersecurity Authority (NCA) |
| Framework | Cybersecurity |
| Tier | Rules, controls & standards |
| Legal status | Guidance |
The National Policy for Managed Security Operations Centres (NPMSOC-1:2024) is a National Cybersecurity Authority policy on the use and provision of managed security operations centre (MSOC) services in the Kingdom, published as a public (TLP: White) document; the Arabic version is the binding text.
The policy is organised into definitions (covering critical national infrastructure, security operations centres, MSOC services, beneficiaries and service providers), followed by policy objectives, scope, the policy clauses themselves, compliance procedures and general provisions, with an appendix listing MSOC services. It frames how beneficiary organisations engage third-party providers to monitor and operate their security operations capabilities. It operates alongside the Regulatory Framework for Licensing Managed Security Operations Centre Services (RFMSOC-1:2024), which sets the licensing and qualification requirements for providers delivering those services.
Content and register data licensed CC BY 4.0. Cite the live URL. Machine-readable register (JSON) · Markdown register · Content last verified: 2026-08-13