The National Cybersecurity Authority launches public consultation on the “Regulatory Framework for Licensing Cybersecurity Compliance Assessment Services”

The National Cybersecurity Authority (NCA) has called on the public to submit their views on the “Regulatory Framework for Licensing Cybersecurity Compliance Assessment Services” before the deadline on Sunday, November 20, 2022. This framework is in alignment with NCA strategic goals to stimulate the growth of the cybersecurity sector and encourage investment therein, and in alignment with NCA’s mandate, powers and duties of introducing cybersecurity policies, governance mechanisms, frameworks, standards, controls, and guidelines; as well as circulating them with relevant stakeholders, following up on their compliance, and updating them; in addition to, licensing individuals and non-governmental organizations to practice cybersecurity activities and operations determined by NCA.

The objective of the framework is to regulate activities related to organizations’ compliance assessment services with NCA’s cybersecurity regulations, strengthen organizations’ cybersecurity, and the growth of specialized companies in cybersecurity, create job opportunities by creating a broader market for cybersecurity compliance assessment service providers. 

NCA has highlighted that the framework sets the minimum requirements to qualify cybersecurity compliance assessment service providers to obtain a license. The licenses are classified into four types based on the organization and the regulatory requirements being assessed. The framework targets government, private sector and non-profit organizations, in addition to cybersecurity service providers, and compliance assessors; in order to safeguarding the Kingdom’s vital interests, national security, critical infrastructures, priority sectors, and government services and activities, in addition to localizing highly skilled jobs, promoting entrepreneurs and small and medium enterprises in the sector.

NCA urges all relevant organizations and the public to provide comments and suggestions on the draft framework before November 20, 2022. A copy of the framework draft can be obtained through the unified electronic platform for public consultations Istitla’a or through NCA website.