National Cybersecurity Authority (NCA)

The Saudi Arabian government established the National Cybersecurity Authority (NCA) to oversee cybersecurity affairs. NCA introduced Essential Cybersecurity Controls (ECC-1:2018) with 114 controls across five domains to mitigate internal and external cyber risks. These controls focus on Confidentiality, Integrity, and Availability while aligning with best practices across Strategy, People, Processes, and Technology to protect organizational assets.