Cyber Resilience

A free ISO 22301 implementation checklist — every clause area, the evidence a certification auditor asks for, and where SAMA expects more than the standard.

A practitioner's guide to the NCA National Framework for Cybersecurity Risk Management — scope, the four-phase methodology, the 5x5 matrix and Haseen reporting.

A guide to NCA Operational Technology Cybersecurity Controls (OTCC) — the three facility levels, 122 subcontrols, and the OT zone and remote access rules.

A guide to NCA Telework Cybersecurity Controls (TCC-1:2021) — the 21 controls across three domains, BYOD and MDM rules, and offshore remote access monitoring.

Cyber incident classification, escalation and regulatory notification for Saudi Arabia — SAMA CSF, NCA ECC and PDPL/SDAIA obligations unified in one runbook.

What business continuity management requires in Saudi Arabia — the SAMA BCM Framework, ISO 22301, and the NCA resilience controls, and how they stack.

A free business continuity plan template for Saudi organisations — sections, contents and structure aligned to SAMA BCM Framework and ISO 22301, downloadable.

A practical guide to business impact analysis for Saudi banks — MTPD, RTO, RPO, dependency mapping, SAMA BCM Framework and ISO 22301 alignment in 2026.

What the SAMA Business Continuity Management Framework actually requires — governance, BIA, recovery, testing — and how to evidence it for an inspection.