Wadira: Find your way through Saudi data & privacy law.
Home › Frameworks › Cybersecurity › Saudi Cybersecurity Workforce Framework (SCyWF-1:2020)
| Type | Instrument |
|---|---|
| Issuing authority | National Cybersecurity Authority (NCA) |
| Framework | Cybersecurity |
| Tier | Rules, controls & standards |
| Legal status | Binding |
The Saudi Cybersecurity Workforce Framework (SCyWF-1:2020) is the National Cybersecurity Authority's reference model for categorising cybersecurity work in Saudi Arabia, issued under the NCA's mandate (Royal Order 6801 of 1439H) to build the national cybersecurity workforce, participate in developing education and training programmes and prepare professional standards.
The framework organises cybersecurity work into five categories (Cybersecurity Architecture, Research and Development; Leadership and Workforce Development; Governance, Risk, Compliance and Laws; Protection and Defence; and Industrial Control Systems and Operational Technologies), comprising twelve specialty areas and forty job roles, each defined by its tasks, knowledge, skills and abilities (TKSAs). The taxonomy adapts the US NICE framework to Saudi workforce demand. Organisations are recommended to adopt it, customising it to their needs, to align workforce structures, recruitment and training with national frameworks; its job roles are included in the Saudi Standard Classification of Occupations, and a separate alignment guide supports mapping existing job titles to SCyWF roles.
Content and register data licensed CC BY 4.0. Cite the live URL. Machine-readable register (JSON) · Markdown register · Content last verified: 2026-08-13