Saudi NCA ECC 1-8-2: 1-8-2 Independent review and audit

Implementation of the cybersecurity controls is reviewed and audited by parties other than the cybersecurity department, independently and without conflict of interest, following Generally Accepted Auditing Standards and the relevant legislative and regulatory requirements.