GRC and cybersecurity consulting aligned to SAMA, NCA and Saudi Vision 2030.
From our Riyadh presence, MAST delivers SAMA CSF, NCA ECC and OTCC, PDPL, CITC and CST-aligned programmes for Saudi banks, payments, energy, healthcare and government clients — with consultants who speak the language of Saudi regulators.
Saudi Central Bank Cyber Security Framework.
National Cybersecurity Authority Essential Cybersecurity Controls.
Operational Technology Cybersecurity Controls for industrial sectors.
Cloud Cybersecurity Controls for cloud service providers and tenants.
Communications, Space & Technology Commission requirements.
Saudi Personal Data Protection Law and its implementing regulations.
Identity and trust services integrations.
Each engagement is led by a senior consultant with sector experience in your jurisdiction.
Programmes aligned to SAMA CSF, NCA ECC/OTCC/CCC and the Saudi PDPL.
Learn moreISMS implementation aligned to NCA ECC and SAMA CSF expectations.
Learn moreMada and SARIE-aware PCI programmes for Saudi issuers and acquirers.
Learn morevCISO, SOC, threat intel and red team — Arabic and English capable.
Learn morePenetration testing aligned to NCA, SAMA and CITC requirements.
Learn moreContinuous attestation against NCA and SAMA control sets.
Learn moreAnonymised snapshots of MAST delivery in your jurisdiction. Every engagement is sponsored by a named Lead Auditor.
Closed 142 prioritised SAMA findings and embedded continuous attestation across 4 lines of business and shared services.
Delivered OT asset visibility, segmentation and incident-response playbooks aligned to NCA OTCC and IEC 62443.
Built tenant-side controls aligned to NCA CCC Level 3 and ISO 27017, with auditable shared-responsibility evidence.
Implemented PDPL governance, notice & consent, DSR workflows and cross-border transfer assessments end-to-end.
End-to-end readiness across acquiring, switching and tokenisation, with QSA on-site assessment support.
Yes. We deliver engagements from Riyadh with on-site presence in Jeddah, Dammam and Khobar as needed.
Yes. We routinely build a single control framework that satisfies SAMA CSF, NCA ECC and ISO 27001 simultaneously, with one evidence library.
Yes. We deliver IEC 62443 and NCA OTCC programmes for energy, utilities and industrial operators.
Tell us about your KSA programme — a senior consultant from MAST responds within one business day.
