2 live · 5 concepts

Browse the knowledge base

Everything that lives here, by category. Frameworks are interactive drill-down maps; concept domains are diagram-first notes. More is added over time, so check back.

Cybersecurity Frameworks

Framework

NCA ECC

Saudi Arabia's Essential Cybersecurity Controls (ECC-2:2024), the mandatory baseline.

4 domains · 108 controls 5 concepts

Framework

SAMA CSF

Saudi Central Bank Cyber Security Framework for the financial sector.

4 domains · 32 subdomains · risk-based

All concepts

Every concept page, in reading order.

NCA ECC

NCA ECC, Framework Overview

ECC-2:2024 in one map: four domains, 28 subdomains, 108 controls, Saudi Arabia's mandatory cyber baseline.

intro #governance#baseline

NCA ECC

Cybersecurity Governance (Domain 1)

Domain 1: the ten governance subdomains that set strategy, risk, roles, compliance and people controls.

core #governance#risk

NCA ECC

Cybersecurity Defence (Domain 2)

Domain 2: fifteen defensive subdomains protecting assets, identities, data, networks and applications.

core #defence#access-control

NCA ECC

Cybersecurity Resilience (Domain 3)

Domain 3: embedding cybersecurity into business continuity so services survive a cyber incident.

core #resilience#bcm

NCA ECC

Third-Party & Cloud Cybersecurity (Domain 4)

Domain 4: managing third-party and cloud risk, contracts, vetting, and keeping data inside the Kingdom.

core #third-party#cloud