NCA Cybersecurity Controls

Also known as: NCA, ECC, OTCC, CSCC, CCC, Essential Cybersecurity Controls, Operational Technology Cybersecurity Controls, Critical Systems Cybersecurity Controls, Cloud Cybersecurity Controls

National Cybersecurity Authority controls — ECC, CSCC, CCC and OTCC — National Cybersecurity Authority (NCA)

Official site Official change log

The mandatory control sets Saudi Arabia's National Cybersecurity Authority issues for government bodies, critical national infrastructure and their suppliers. The Essential Cybersecurity Controls (ECC 2-2024) are the baseline; the Critical Systems (CSCC - 1: 2019), Cloud (CCC - 2: 2024) and Operational Technology (OTCC-1:2022) controls extend it for national critical systems, cloud providers and tenants, and industrial control systems.

Timeline

No changes recorded yet — we are watching, and nothing has been published.

Monitoring

Watched by 4 official sources. Watching since 19 September 2026.