Analysis of Saudi regulatory developments and practical guidance for security and risk leaders.
A red-team engagement without documented pre-engagement deliverables creates legal risk, operational disruption, and findings you cannot remediate. This checklist itemises the nine artefacts and three approval gates that must be signed off before the simulation starts.
Wolfsberg questionnaires ask how sanctions screening works, yet many filter logs record only match results and not the logic tested. This checklist sets out eight configuration items to log so you can answer with artifacts.
Build the institutional risk assessment before you score a single customer. This seven-point checklist sets out the data sources to gather and the evidence format that supports a SAMA review and an independent assessor.
A SAMA CSF security architecture review checklist of twelve design questions for core banking, payment switch and treasury deployments. Use it before go-live to find system-specific risks while they are still cheap to fix.
Hiring a virtual CISO? This roadmap shows exactly what to expect in the first 90 days—from risk snapshot to board pack. Hold any vCISO accountable with this week-by-week checklist.
NCA ECC Domain 1 requires fourteen separate cybersecurity policies, but many institutions create redundant documents or miss mandatory clauses. This checklist shows which policies are genuinely required, which three can be consolidated, and the eleven clauses every policy must contain.
Most vCISO engagements fail to define concrete deliverables in the first quarter, leaving boards uncertain whether the arrangement delivers value. This checklist maps fifteen tangible outputs a vCISO must produce before presenting the first quarterly security report to the board.
The NCA periodically updates ECC control language and evidence expectations, but many institutions discover changes only when an assessor flags a gap. This checklist presents eight control amendments issued in Q1 2025, explains what changed in each, and identifies which policies or technical configurations you must update.
SAMA examiners verify twelve specific documentation elements in every individual and corporate KYC file during AML/CTF inspections. This checklist shows compliance officers and KYC team leads exactly what to audit in their own files before the next examination.
Answer a few questions for your framework. You get a score, your biggest gaps and — if you want it — a detailed assessment from our team.
Tell us where you stand. We will show you the shortest path to what your regulator expects.
SAMA, NCA and SDAIA changes and what they mean for your institution — once a month.
↑↓ to move↵ to openEsc to close
