NCA ECC
Gap assessment and remediation against the National Cybersecurity Authority Essential Cybersecurity Controls, the mandatory baseline for most Saudi organizations.
Learn moreMake remote and hybrid work secure by design. We assess your remote access, devices, data handling and people practices against the National Cybersecurity Authority's Telework Cybersecurity Controls.
The Telework Cybersecurity Controls (TCC) extend the Essential Cybersecurity Controls to working remotely. They set the minimum requirements for organizations that allow staff to work from outside the office, so that remote access does not become the easiest way in for an attacker.
The controls cover the whole telework chain: governance and policy, the security of remote access and the devices used, protection of data outside the office, monitoring, and the awareness of the people working remotely.
Every engagement follows the Cyber Shields rhythm: Assess, Protect, Monitor. For this engagement, that translates into the following steps.
Findings are anchored to recognized frameworks so they are defensible and cross-mappable.
The documents behind this page, linked at the publisher. Where a Saudi regulation is published in both languages, the Arabic text is the binding version.
Every engagement is scoped individually. Pricing depends on the size and complexity of your environment, the systems or controls in scope, and the timeline you need to work to. Rather than publish figures that rarely fit a specific situation, we prepare a written proposal with a clear fee and schedule once your scope is understood.
Tell us about your organization and the deadline you are working toward, and we will return a tailored proposal within five business days, following a signed Non-Disclosure Agreement.
They apply to organizations within the scope of the NCA controls that allow telework. Others often adopt them as good practice. We confirm your position during scoping.
Yes. The configuration review covers remote access, identity and endpoint settings, and we can add targeted testing in scope.
Yes. Third-party remote access is one of the highest risks, and we include it in the assessment.
Yes. Reports, the executive summary, and the readout session are available in both Arabic and English at no additional cost.
Gap assessment and remediation against the National Cybersecurity Authority Essential Cybersecurity Controls, the mandatory baseline for most Saudi organizations.
Learn moreHardening, segmentation, secure baselines and architecture review for production environments.
Learn morePhishing simulations and role-based training in Arabic and English. Behaviour change, not box-ticking.
Learn moreTell us how your teams work remotely and we will return a written proposal within five business days. NDA first, always.