Saudi NCA ECC 1-5-1: 1-5-1 Cybersecurity risk management methodology

The cybersecurity department identifies, documents and approves the cybersecurity risk management methodology and procedures, taking account of the confidentiality, integrity and availability of information and technology assets.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in 1-5 Cybersecurity Risk Management – Saudi NCA ECC

1-5-2 1-5-2 Risk methodology implemented
1-5-3-1 1-5-3-1 Risk assessment at the early stage of technology projects
1-5-3-2 1-5-3-2 Risk assessment before major infrastructure changes
1-5-3-3 1-5-3-3 Risk assessment when planning third-party services
1-5-3-4 1-5-3-4 Risk assessment before releasing new technology services and products
1-5-4 1-5-4 Risk methodology reviewed

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Saudi NCA ECC controls