NCA ECC
Gap assessment and remediation against the National Cybersecurity Authority Essential Cybersecurity Controls, the mandatory baseline for most Saudi organizations.
Learn moreKnow exactly where and how your organization uses encryption, and bring it in line with the National Cybersecurity Authority's National Cryptographic Standards, with a plan for what comes next, including post-quantum algorithms.
The National Cryptographic Standards (NCS) define the cryptographic algorithms, key lengths and uses that are acceptable for protecting data and systems in the Kingdom. They give organizations one reference for choosing and configuring encryption, hashing, digital signatures and key exchange.
The standards are evolving. The National Cybersecurity Authority has consulted publicly on updates that add post-quantum algorithms, random number generators and quantum key distribution. Organizations that know their cryptographic inventory today will be able to migrate calmly tomorrow.
Every engagement follows the Cyber Shields rhythm: Assess, Protect, Monitor. For this engagement, that translates into the following steps.
Findings are anchored to recognized frameworks so they are defensible and cross-mappable.
The documents behind this page, linked at the publisher. Where a Saudi regulation is published in both languages, the Arabic text is the binding version.
Every engagement is scoped individually. Pricing depends on the size and complexity of your environment, the systems or controls in scope, and the timeline you need to work to. Rather than publish figures that rarely fit a specific situation, we prepare a written proposal with a clear fee and schedule once your scope is understood.
Tell us about your organization and the deadline you are working toward, and we will return a tailored proposal within five business days, following a signed Non-Disclosure Agreement.
Most organizations do not know every place encryption is used. Without the inventory you cannot check compliance or plan a migration.
The planning is. Data encrypted today could be stored and decrypted later, so knowing your inventory and priorities now is the sensible first step.
We recommend the changes and help your teams plan them. Implementation stays with your teams or vendors, with our support if you want it.
Yes. Reports, the executive summary, and the readout session are available in both Arabic and English at no additional cost.
Gap assessment and remediation against the National Cybersecurity Authority Essential Cybersecurity Controls, the mandatory baseline for most Saudi organizations.
Learn moreData Cybersecurity Controls: protecting data by its classification, across its whole lifecycle.
Learn moreHardening, segmentation, secure baselines and architecture review for production environments.
Learn moreThe post-quantum algorithms NCS-2:2025 accepts, its hybrid requirement, and a calm plan to get ready.
Read the articleTell us about your systems and we will return a written proposal within five business days. NDA first, always.