Wadira: Find your way through Saudi data & privacy law.

Home › Frameworks › Telecommunications & ICT › Telecom Infrastructure Risk Management Regulations (v2)

Telecom Infrastructure Risk Management Regulations (v2)

CST risk management rules for telecom infrastructure

Type	Regulation
Issuing authority	Communications, Space & Technology Commission (CST)
Framework	Telecommunications & ICT
Tier	Implementing & executive regulation
Legal status	In force
Instrument number	CST decision 525/1445 · Communications, Space and Technology Commission
Issued	2024-02-08
Version	2
Dates	CST decision 525/1445, 8 February 2024; in force
Last verified	2026-10-20

CST's Telecom Infrastructure Risk Management Regulations (version 2) set risk management duties for operators of telecom infrastructure.

• Issued by CST decision 525/1445 on 8 February 2024; in force.
• Read with the CRF and the NCA's controls for cybersecurity aspects.

Documents

• Official source (www.cst.gov.sa)

In this framework

• Telecommunications and Information Technology Act
• Organisation of the Communications, Space and Technology Commission (as amended)
• Implementing Regulations of the Telecommunications and IT Act
• Regulations for Curbing Spam Messages and Calls (RC01 v3)
• Regulations of User Rights Protection Rules
• Regulations for Providing Digital Content Platform Services
• Internet of Things Regulations (RT18 v3)
• Space Sector Regulations and Guidelines (draft)
• CST licensing and registration (index)
• Cybersecurity Regulatory Framework (CRF) for ICT Service Providers (Second Version)

---

Content and register data licensed CC BY 4.0. Cite the live URL. Machine-readable register (JSON) · Markdown register · Content last verified: 2026-10-21