ISO/IEC 42001
A certifiable management system for responsible, secure use of AI.
Learn moreUse AI with confidence. We help you prepare for the National Cybersecurity Authority's AI Cybersecurity Guidelines, covering the AI tools your staff use and the AI systems you build, including generative and agentic AI.
The AI Cybersecurity Guidelines from the National Cybersecurity Authority set cybersecurity requirements for the use and development of artificial intelligence in the Kingdom. The public consultation closed in August 2026 and the guidelines are being finalized; their scope covers emerging technologies such as generative and agentic AI, for public and private entities that use or plan to adopt AI.
The draft is organized around four domains: cybersecurity governance, cybersecurity defence, cybersecurity resilience, and third-party cybersecurity. In practice that means knowing which AI systems you run, protecting the data and models behind them, controlling what AI agents are allowed to do, and managing the AI vendors you depend on.
Every engagement follows the Cyber Shields rhythm: Assess, Protect, Monitor. For this engagement, that translates into the following steps.
Findings are anchored to recognized frameworks so they are defensible and cross-mappable.
The documents behind this page, linked at the publisher. Where a Saudi regulation is published in both languages, the Arabic text is the binding version.
Every engagement is scoped individually. Pricing depends on the size and complexity of your environment, the systems or controls in scope, and the timeline you need to work to. Rather than publish figures that rarely fit a specific situation, we prepare a written proposal with a clear fee and schedule once your scope is understood.
Tell us about your organization and the deadline you are working toward, and we will return a tailored proposal within five business days, following a signed Non-Disclosure Agreement.
The public consultation closed in August 2026 and the text is being finalized. We assess against the published draft and update our assessment when the final version is issued.
Yes. Staff use of AI tools is one of the most common sources of data leakage, and it falls within the scope of AI governance.
ISO/IEC 42001 is an international management system for AI. The two fit together, and we can align your programme with both.
Yes. Reports, the executive summary, and the readout session are available in both Arabic and English at no additional cost.
A certifiable management system for responsible, secure use of AI.
Learn moreReadiness for the Personal Data Protection Law: data governance, records of processing, and data-subject rights handling.
Learn moreGap assessment and remediation against the National Cybersecurity Authority Essential Cybersecurity Controls, the mandatory baseline for most Saudi organizations.
Learn moreThe four domains of the NCA AI guidelines and seven steps you can take before the final text arrives.
Read the articleSeven parts of an AI acceptable-use policy that lets staff use ChatGPT without leaking your data.
Read the articleTell us how your organization uses AI and we will return a written proposal within five business days. NDA first, always.