In brief
- The Cybersecurity Controls for Non-Critical National Infrastructure Private Sector Entities (NCINCC-1:2025) issued by the National Cybersecurity Authority (NCA) establish a minimum cybersecurity baseline for private sector entities operating in Saudi Arabia.
- The framework adopts a tiered approach, distinguishing