The National Cybersecurity Authority (NCA) of Saudi Arabia introduced the Essential Cybersecurity Controls (ECC – 1: 2018) after conducting a comprehensive study of multiple national and international cybersecurity frameworks and standards.
NCA developed the controls by reviewing legal and regulatory requirements, global cybersecurity best practices, analyzing cybersecurity incidents and attacks on government establishments, and considering opinions of various prominent business firms of the country.
ECC applies to government organizations in the Kingdom of Saudi Arabia, including ministries, authorities, establishments, companies, entities, and private sector organizations owning, operating or hosting Critical National Infrastructures (CNIs).
The National Cybersecurity Authority of Saudi Arabia, in 2019, in addition to the ECC standard, has introduced Critical Systems Cybersecurity Controls (CSCC – 1: 2019), which mandates the minimum cybersecurity requirements for critical systems within national organizations.
For over a decade, Aujas is providing advanced cybersecurity services across key industry verticals such as BFSI, Telecom, Oil & Gas, Aviation, Healthcare, Government and other enterprise clients in Saudi Arabia.
Aujas offers the following services to help organizations through adequate assessment and implementation of the NCA standards:
We adopt a customized delivery approach to suit the specific needs of each customer. Initial discussions with you help us to understand your organization, control environment maturity, sectoral challenges, and requirements related to NCA compliance.
Aujas NCA Compliance Program Approach
Copyrights © 2025 All Rights Reserved by Aujas.