GCC Compliance

Saudi NCA Essential Cybersecurity Controls (ECC-1:2018) Implementation Kit

Full implementation of the Saudi National Cybersecurity Authority Essential Cybersecurity Controls (ECC), aligned to government-supplier requirements.

Who this is for

Government bodies and any organisation supplying or hosting services for the Saudi public sector.

What's included

  • All 114 ECC sub-controls documented
  • 5-domain coverage: Governance, Defence, Resilience, Third Party, Industrial
  • Self-assessment workbook (NCA template-aligned)
  • Compliance evidence index
  • Cybersecurity governance committee charter
  • Critical-system identification register
  • ECC maturity-level scoring rubric
  • Annual self-assessment submission pack

Deliverable

Full ECC toolkit in editable Word + Excel, self-assessment workbook, evidence index.

Estimated delivery time

7-10 business days · indicative turnaround for SME-tier orders. Enterprise / multi-site engagements scheduled separately.

Frequently asked questions

Who is the listed price for?
The price of $2,500 USD shown above is for SMEs and startups. For larger corporates, enterprise licensing or multi-site programmes, contact us for a tailored quote.
Are the documents editable and brandable?
Yes. Everything is delivered as fully editable Microsoft Word and Excel files you can customise and brand for your organisation.
Do you also offer implementation support?
Yes — pair this toolkit with our retainer services (CISO-aaS, DPO-aaS, Compliance Officer-aaS, Annual Surveillance) for ongoing support.
Is there a money-back guarantee?
Yes — 30 days, no questions asked.