A resilient, secure, and trusted Saudi cyberspace that enables growth and prosperity

About NCA

The National Cybersecurity Authority (NCA) is the national authority in charge of cybersecurity in the Kingdom, and the national reference in all its affairs. NCA aims at strengthening cybersecurity to safeguard the State’s vital interests, national security, critical infrastructures, priority sectors, and government services and activities.

Most prominent services

Show All

External Evaluations

A service that focuses on the process of conducting external assessments to gauge the compliance of organizations with legislation issued by NCA.

Entity Services

Information Enrichment

A service that focuses on threat investigation and actionable threat indicators, including data gathering, processing, and analysis. Threat indicators are shared with organizations via the platform, which includes Indicator of Compromise (IoC) and Indicator of Behavior (IoB) enabling proactive defense against cyber-attacks.

Entity Services

Risk Assessment Management

This service allows the organization to manage all the assets uploaded via the platform. The service enables viewing all submitted assets. It also enables national organization to submit new assets, and that include all types of assets which are systems, social media accounts, facility and operational technologies.

Entity Services

Cybersecurity Services Provider’s Registration

NCA launched a registration service for any entity providing cybersecurity service or solutions or products in the Kingdom. In line with its efforts to regulate the sector, protect vital interests and infrastructure, and raise the level of services provided to national institutions.

Entity Services

Regulatory Documents

Show All

Controls

Latest Controls

Show All

Data Cybersecurity Controls

Operational Technology Cybersecurity Controls

Critical Systems Cybersecurity Controls

Telework Cybersecurity Controls (TCC)

Frameworks and Standards

Latest Frameworks and Standards

Show All

Regulatory Framework for Licensing Managed Security Ope...

National Policy for Managed Security Operations Centers

The Saudi Cybersecurity Higher Education Framework (SCy...

The National Cryptographic Standards (NCS)

Guidelines

Latest Guidelines

Show All

Cybersecurity Guidelines for e-Commerce

Guide to Essential Cybersecurity Controls (ECC) Impleme...

Cybersecurity Toolkits

Cybersecurity Guidelines for Internet of Things (IoT)

News

Show All

National Cybersecurity Authority Participates in RSA Conference Alongside Leading National Companies

Fifth edition of the GCF Annual Meeting to be held in October 2025 under the patronage of the Custodian of the Two Holy Mosques

National Cybersecurity Authority Announces Licensed Managed Security Operations Center (MSOC) Providers for Tier1

Campaigns and Awareness Materials

Show All

Backup

Backup is one of the essential procedures that helps restore your data. It can be beneficial in many situations, such as: Theft or loss of the device Sudden device failure Accidental deletion of file or data Infection of the device with malicious software Show More

Backup

Social Engineering

Passwords

Latest Security Alerts

Show All

Weekly Vulnerabilities Summary 4 May - 10 May19/05/2025

Critical

Mozilla Alert17/05/2025

Critical

Drupal Alert14/05/2025

Critical

Subscribe to the newsletter to receive the latest security alerts.

Last Update at: 28/04/2025 - 3:22pm Saudi time