Awareness & Training
Phishing simulations and role-based training in Arabic and English. Behaviour change, not box-ticking.
Learn moreBuild the cybersecurity team your organization actually needs. We use the National Cybersecurity Authority's Saudi Cybersecurity Workforce Framework to define roles, write job descriptions, find skills gaps and plan development.
The Saudi Cybersecurity Workforce Framework (SCyWF) from the National Cybersecurity Authority describes cybersecurity work roles together with the tasks, knowledge and skills each one requires. It gives organizations a shared national language for hiring, organizing and developing cybersecurity people. The framework was updated in June 2026.
Many control frameworks, including the ECC, expect cybersecurity roles to be defined and filled by qualified people. The workforce framework makes that practical: a clear structure for the security function, job descriptions that match real work, and a development path for each person.
Every engagement follows the Cyber Shields rhythm: Assess, Protect, Monitor. For this engagement, that translates into the following steps.
Findings are anchored to recognized frameworks so they are defensible and cross-mappable.
The documents behind this page, linked at the publisher. Where a Saudi regulation is published in both languages, the Arabic text is the binding version.
Every engagement is scoped individually. Pricing depends on the size and complexity of your environment, the systems or controls in scope, and the timeline you need to work to. Rather than publish figures that rarely fit a specific situation, we prepare a written proposal with a clear fee and schedule once your scope is understood.
Tell us about your organization and the deadline you are working toward, and we will return a tailored proposal within five business days, following a signed Non-Disclosure Agreement.
No. Small organizations combine several work roles in one person. The framework helps you decide which responsibilities matter and who holds them.
Yes. Clear roles and development paths make it easier to grow national talent into security positions.
Yes. Defined cybersecurity roles and qualified staff are expected by the ECC and related controls.
Yes. Reports, the executive summary, and the readout session are available in both Arabic and English at no additional cost.
Phishing simulations and role-based training in Arabic and English. Behaviour change, not box-ticking.
Learn moreGap assessment and remediation against the National Cybersecurity Authority Essential Cybersecurity Controls, the mandatory baseline for most Saudi organizations.
Learn moreAdopt the national framework for identifying, assessing, treating and reporting cybersecurity risk.
Learn moreTell us about your security team and we will return a written proposal within five business days. NDA first, always.