Insights

Perspectives on cyber regulation and risk

Analysis of Saudi regulatory developments and practical guidance for security and risk leaders.

Cyber insurance · 26 Oct 2026

The Three PDPL Breach-Response Questions Every Cyber-Insurance Proposal Form Asks

Underwriters weight PDPL breach-response capability more heavily than any other control category when pricing Saudi cyber policies. This article identifies the three breach-response questions that appear in every major insurer's proposal form, the documentary evidence underwriters accept as proof of readiness, and how tabletop-exercise reports and SDAIA notification templates reduce your policy ex

Wolfsberg Correspondent Banking Questionnaire SAMA Cross-Check

SAMA examiners increasingly benchmark correspondent-banking due diligence against the Wolfsberg Questionnaire, yet many banks treat it as a vendor form rather than an audit template. This article identifies the twelve questionnaire sections that examiners verify against internal KYC documentation and explains the evidence format SAMA expects for each.

ISO 27001 Cloud Security Cyber Insurance: Four Evidence Artefacts

Underwriters scrutinise multi-tenant cloud controls more closely in 2025 because breaches in shared infrastructure drive the largest claims. This article identifies the four evidence artefacts that satisfy ISO 27001:2022 Annex A 5.23 and reduce cyber-insurance exclusions.