Saudi Arabia · Regulation guide
NCA Operational Technology Cybersecurity Controls (OTCC)
Issued by National Cybersecurity Authority (NCA)
Applies to: Organisations that operate industrial control systems and operational technology, such as energy, utilities, manufacturing and transport.
The OTCC extend the ECC to operational technology and industrial control systems, where availability and safety matter as much as confidentiality.
They cover OT asset inventory, network segmentation, remote access, monitoring, incident response and the coordination of IT and OT security.
General guidance, not legal advice. Always confirm scope and current requirements with the issuing authority.
Discuss NCA OTCC with us
Gap assessment, control mapping or evidence tracking.
How we help
- ✓OT asset and risk assessment
- ✓Gap assessment against OTCC and ECC
- ✓Joint IT and OT security governance
- ✓Evidence tracking in GRC software
Related ISO standards
NCA OTCC questions
Is this legal advice?+
No. This is a general overview. Confirm scope, the current edition and your obligations with the issuing authority and your legal or compliance advisers.
Next step
Where does your programme stand?
The GRC maturity check takes three minutes and shows which areas to fix first.