National Cybersecurity Authority Announces the Start of Issuing Licenses to Tier 2 MSOC Providers

The National Cybersecurity Authority (NCA) has announced the commencement of issuing Tier 2 licenses to provide Managed Security Operations Center (MSOC) services. This step aligns with the NCA's strategic goals of fostering a robust cybersecurity sector in Saudi Arabia and stimulating investment therein to ultimately strengthening national cybersecurity and improving services for organizations in the kingdom to access cybersecurity services that are reliable, mature, and of high quality; in addition to the development of specialized national capabilities in this field.

Licensed MSOC service providers are allowed to deliver a range of services, including the detection of cyber threats and the provision of recommendations on how to address them. Tier 2 licenses allow providers to deliver comprehensive MSOC services to all organizations, excluding government organizations and organizations that own, operate, or host Critical National Infrastructures (CNIs) according to the Regulatory Framework for Licensing the Provision of MSOC Services. A list of companies that are currently licensed to provide Tier 2 MSOC services is available on the NCA’s official website.

NCA has stated that receiving applications for Tier 2 MSOC licenses is still available through the National Cybersecurity Services Portal (Haseen). NCA encourages entities to leverage the services provided by licensed providers to deliver MSOC services.

The National Cybersecurity Authority (NCA) is the national entity in charge of cybersecurity in the Kingdom of Saudi Arabia and the national reference in all its affairs. The NCA aims to enhance the Kingdom's cybersecurity posture to safeguard its vital interests, national security, critical infrastructure, priority sectors, and government services and activities. The NCA undertakes several key responsibilities, including stimulating the growth of the Kingdom's cybersecurity sector, fostering innovation and investment therein, and licensing individuals and non-governmental entities to conduct cybersecurity-related activities and operations.

To View The List of Licensed Entities