SDAIA

A guide to NCA Cloud Cybersecurity Controls (CCC-2:2024) — the CSP and CST control sets, four classification levels, and the data localisation change.

A free NCA DCC-1:2022 compliance checklist — the four classification levels, every control by data lifecycle stage, and the third-party sharing rules.

A guide to NCA Data Cybersecurity Controls (DCC-1:2022) — four classification levels, 19 controls across the data lifecycle, and third-party sharing rules.

Cyber incident classification, escalation and regulatory notification for Saudi Arabia — SAMA CSF, NCA ECC and PDPL/SDAIA obligations unified in one runbook.