About the Program

The National Cybersecurity Authority (NCA) has launched a voluntary certification program designed to help Saudi organizations formally demonstrate their alignment with the NCA Essential Cybersecurity Controls (ECC) v2.0. The program offers three certification tiers based on organizational size and criticality.

Certification Tiers

  • Foundation: For small-medium enterprises — covers 60 essential controls
  • Advanced: For large organizations — covers all 114 ECC controls
  • Critical Infrastructure: For government and critical sectors — enhanced requirements

Benefits

Certified organizations gain recognition as cybersecurity-ready entities, competitive advantage in government procurement, and reduced insurance premiums.