NCA Critical Systems Cybersecurity Controls (CSCC)
Additional controls for systems whose failure would seriously affect national interests.
Saudi Arabia · National Cybersecurity AuthorityWho it applies to
Operators of critical systems, in addition to the ECC.
Key areas
- Continuous adherence to the ECC is a prerequisite
- Controls tailored to critical systems and their hosting
- Cloud-hosted critical systems must also meet the CCC
How Nigehban helps
- Gap assessment against the requirements
- Remediation roadmap and implementation support
- Independent audit and evidence review
- Monitoring that proves controls keep working
Related standards
NCA Essential Cybersecurity Controls (ECC-2:2024)
Saudi Arabia’s baseline cybersecurity controls, issued by the National Cybersecurity Authority and revised in 2024.
Saudi ArabiaNCA Cloud Cybersecurity Controls (CCC-2:2024)
Controls for cloud services that extend the ECC, for both cloud service providers and their customers.
Saudi ArabiaNCA Operational Technology Cybersecurity Controls (OTCC-1:2022)
Controls for industrial and operational technology environments.
Saudi Arabia