Wadira: Find your way through Saudi data & privacy law.
Home › Frameworks › Cybersecurity › Regulatory Framework for Licensing Managed Security Operations Centre Services (RFMSOC-1:2024)
| Type | Instrument |
|---|---|
| Issuing authority | National Cybersecurity Authority (NCA) |
| Framework | Cybersecurity |
| Tier | Rules, controls & standards |
| Legal status | Guidance |
The Regulatory Framework for Licensing Managed Security Operations Centre (MSOC) Services (RFMSOC-1:2024) is the National Cybersecurity Authority's licensing regime for providers of managed security operations centre services in the Kingdom, published as a public (TLP: White) document; the Arabic version is the binding text.
The framework sets out its objectives and scope, then the provisions for licensing MSOC services (obtaining, maintaining, renewing and transferring a licence), followed by service-provider obligations, rules on subcontracting MSOC services, and the requirements for individuals to obtain a qualification certificate to work in an MSOC, with general provisions and appendices. Its definitions cover security operations centres, MSOC services, beneficiaries, service providers, cloud computing service providers and MSOC analysts. It pairs with the National Policy for Managed Security Operations Centres (NPMSOC-1:2024), which governs how beneficiary organisations use such services.
Content and register data licensed CC BY 4.0. Cite the live URL. Machine-readable register (JSON) · Markdown register · Content last verified: 2026-08-13