Awareness & Training
Phishing simulations and role-based training in Arabic and English. Behaviour change, not box-ticking.
Learn moreYour official social media accounts speak for your organization. We assess and harden them against the National Cybersecurity Authority's Organizations' Social Media Accounts Cybersecurity Controls, so a stolen password never becomes a public crisis.
The Organizations' Social Media Accounts Cybersecurity Controls (OSMACC) set the requirements for protecting the official accounts that organizations run on social media platforms. A hijacked account can publish false statements, scam followers and damage trust within minutes.
The controls cover who owns and manages each account, how access is granted and removed, strong authentication, the devices and tools used to post, monitoring for misuse, and how to respond when an account is compromised.
Every engagement follows the Cyber Shields rhythm: Assess, Protect, Monitor. For this engagement, that translates into the following steps.
Findings are anchored to recognized frameworks so they are defensible and cross-mappable.
The documents behind this page, linked at the publisher. Where a Saudi regulation is published in both languages, the Arabic text is the binding version.
Every engagement is scoped individually. Pricing depends on the size and complexity of your environment, the systems or controls in scope, and the timeline you need to work to. Rather than publish figures that rarely fit a specific situation, we prepare a written proposal with a clear fee and schedule once your scope is understood.
Tell us about your organization and the deadline you are working toward, and we will return a tailored proposal within five business days, following a signed Non-Disclosure Agreement.
No. Your team keeps control of the accounts. We guide them through the settings and verify the result together.
We include agency access in the inventory and set rules for how it is granted, monitored and removed.
The highest-risk settings, such as strong authentication and access clean-up, can usually be done in the first sessions.
Yes. Reports, the executive summary, and the readout session are available in both Arabic and English at no additional cost.
Phishing simulations and role-based training in Arabic and English. Behaviour change, not box-ticking.
Learn moreGap assessment and remediation against the National Cybersecurity Authority Essential Cybersecurity Controls, the mandatory baseline for most Saudi organizations.
Learn moreThe NCA cybersecurity controls for private companies outside critical infrastructure, adopted December 2025.
Learn moreTell us about your official accounts and we will return a written proposal within five business days. NDA first, always.