🔐 Cybersecurity Glossary

A communication security method where data is encrypted on the sender's device and only decrypted on the recipient's device, preventing intermediaries including service providers from accessing the plaintext content. This approach aligns with PDPL Article 18 requirements for protecting personal data during transmission and NCA ECC controls for secure communications in critical infrastructure sectors supporting Vision 2030 digital transformation.

Saudi Arabia's comprehensive data protection regulation enacted in 2021 that governs the collection, processing, storage, and transfer of personal data. It establishes rights for data subjects and obligations for data controllers and processors, with penalties for non-compliance reaching up to SAR 3 million.

A systematic process to identify and evaluate potential privacy risks associated with data processing activities, particularly when implementing new technologies, systems, or processes that handle personal data. Under PDPL and SAMA CSF requirements, organizations must conduct PIAs before processing high-risk personal data to ensure compliance and implement appropriate safeguards.

A framework of policies, procedures, hardware, software, and people used to create, manage, distribute, use, store, and revoke digital certificates and manage public-key encryption. PKI enables secure electronic communications and is required by NCA ECC for government entities and SAMA CSF for financial institutions to authenticate users, encrypt data, and ensure non-repudiation of digital transactions.

A security framework that eliminates implicit trust and requires continuous verification of every user and device attempting to access network resources, regardless of their location. ZTNA operates on the principle of 'never trust, always verify' and implements least-privilege access controls with micro-segmentation.