Regulators & Laws

SAMA Cyber Security Framework

Saudi Central Bank cybersecurity framework applicable to all SAMA-regulated entities.

The SAMA CSF defines four maturity domains and is assessed by SAMA periodically. Maturity Level 3 is the regulator's expectation for most member organisations; insurance and payments entities have specific addenda.