Saudi NCA ECC 2-13-3-1: 2-13-3-1 Incident response plans and escalation

Cybersecurity incident response plans and escalation procedures exist. Plans set incident types and severity, roles, emergency communication channels and a playbook, and each incident ends with a report of people involved, key facts, containment steps and recommendations.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in 2-13 Cybersecurity Incident and Threat Management – Saudi NCA ECC

2-13-1 2-13-1 Incident and threat management requirements defined
2-13-2 2-13-2 Incident and threat management implemented
2-13-3-2 2-13-3-2 Incident classification
2-13-3-3 2-13-3-3 Reporting incidents to NCA
2-13-3-4 2-13-3-4 Sharing notifications, threat intelligence and indicators with NCA
2-13-3-5 2-13-3-5 Collecting and handling threat intelligence
2-13-4 2-13-4 Incident management implementation reviewed

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All Saudi NCA ECC controls