Saudi NCA ECC
1-2 Cybersecurity Management – Saudi NCA ECC

Saudi NCA ECC 1-2-1: Independent cybersecurity department

What does 1-2-1 require?

A cybersecurity department is established within the entity, independent of the IT and communications department (High Order No. 37140 of 14/08/1438H); NCA recommends it report directly to the head of the entity or his or her delegate, avoiding conflicts of interest.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

Other controls in 1-2 Cybersecurity Management – Saudi NCA ECC

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.