Help Center
Frequently Asked Questions
Find answers to your questions about cybersecurity and the CISO Consulting platform
🤖 AI Answer
Compliance & Regulations 3
The SAMA Cybersecurity Framework is a comprehensive framework issued by the Saudi Arabian Monetary Authority to help financial institutions manage cyber risks. It covers governance, risk management, compliance, operations, and third-party security.
Was this helpful?
ISO/IEC 27001 is the international standard for Information Security Management Systems (ISMS). It is not mandatory in Saudi Arabia by law, but is strongly recommended and often required by enterprise customers and government tenders. Achieving ISO 27001 certification demonstrates a mature security posture and can accelerate compliance with SAMA CSF and NCA ECC.
Was this helpful?
ISO 27001:2022 restructures Annex A from 14 domains and 114 controls to 4 themes (Organizational, People, Physical, Technological) and 93 controls. Key additions include controls for Threat Intelligence, Information Security for Cloud Services, ICT Readiness for Business Continuity, Physical Security Monitoring, Configuration Management, and Data Masking. Organizations certified to 2013 must transition by October 2025.
Was this helpful?
No matching questions found.
Didn't find what you're looking for?
✉️ Contact Us