Saudi Arabia · Regulation guide
NCA Data Cybersecurity Controls (DCC)
Issued by National Cybersecurity Authority (NCA)
Applies to: Organisations in scope of the ECC that handle classified data.
The DCC set cybersecurity controls for protecting data according to its classification level, across its lifecycle from creation to disposal.
They connect closely with national data classification and data management standards, so data governance and cybersecurity teams need to work from the same inventory.
General guidance, not legal advice. Always confirm scope and current requirements with the issuing authority.
Discuss NCA DCC with us
Gap assessment, control mapping or evidence tracking.
How we help
- ✓Data classification and inventory support
- ✓Gap assessment against DCC requirements
- ✓Controls and evidence mapped to ECC and ISO 27001
Related ISO standards
NCA DCC questions
Is this legal advice?+
No. This is a general overview. Confirm scope, the current edition and your obligations with the issuing authority and your legal or compliance advisers.
Next step
Where does your programme stand?
The GRC maturity check takes three minutes and shows which areas to fix first.