Saudi NCA ECC 2-10-3-1: 2-10-3-1 Periodic vulnerability assessment

Vulnerabilities are periodically assessed and detected. The guide expects tools linked to applications, devices and servers, databases and networks, run to a periodic plan.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in 2-10 Vulnerabilities Management – Saudi NCA ECC

2-10-1 2-10-1 Vulnerability management requirements defined
2-10-2 2-10-2 Vulnerability management implemented
2-10-3-2 2-10-3-2 Vulnerability classification by severity
2-10-3-3 2-10-3-3 Remediation by classification and risk
2-10-3-4 2-10-3-4 Patching to remediate with pre-production testing
2-10-3-5 2-10-3-5 Subscription to trusted vulnerability sources
2-10-4 2-10-4 Vulnerability management implementation reviewed

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Saudi NCA ECC controls