NCA-ECC
الضوابط الأساسية للأمن السيبراني
Also known as: Essential Cybersecurity Controls, ECC-1:2018
NCA-ECC (Essential Cybersecurity Controls, version ECC-1:2018) is the baseline security framework Saudi Arabia's NCA mandates for all government bodies and any private operator of critical national infrastructure. Five domains, 29 sub-domains, 114 controls cover governance, defense, resilience, third-party cybersecurity, and industrial-control-system security. Annual self-assessment plus biennial NCA audit drive the…
Definition
NCA-ECC (Essential Cybersecurity Controls, version ECC-1:2018) is the baseline security framework Saudi Arabia's NCA mandates for all government bodies and any private operator of critical national infrastructure. Five domains, 29 sub-domains, 114 controls cover governance, defense, resilience, third-party cybersecurity, and industrial-control-system security. Annual self-assessment plus biennial NCA audit drive the compliance loop. FI Tech ships every government and critical-infrastructure deployment ECC-aligned out of the box: encrypted RTSP, hardware root of trust on edge boxes, role-based access control with Saudi-IAM integration, and tamper-evident audit logs forwarded to NCA-approved SIEM platforms.
