Analysis of Saudi regulatory developments and practical guidance for security and risk leaders.
Underwriters scrutinise multi-tenant cloud controls more closely in 2025 because breaches in shared infrastructure drive the largest claims. This article identifies the four evidence artefacts that satisfy ISO 27001:2022 Annex A 5.23 and reduce cyber-insurance exclusions.
Cross-border payment architectures create scoping confusion for Saudi merchants and PSPs. This article walks through the scoping decision tree used in readiness assessments, showing how to document segmentation and justify exclusions before your QSA arrives.
Underwriters verify five Annex A controls first because they predict claims frequency. This guide lists the exact evidence each requires, the formats accepted, and the three documentation gaps that trigger exclusions or premium loading.
Answer a few questions for your framework. You get a score, your biggest gaps and — if you want it — a detailed assessment from our team.
Tell us where you stand. We will show you the shortest path to what your regulator expects.
SAMA, NCA and SDAIA changes and what they mean for your institution — once a month.
↑↓ to move↵ to openEsc to close
