Essential Cybersecurity Controls
NCA ECC
GCC nationalNational cyber controls mandatory for KSA government and critical infrastructure, with five domains mapped to assessments and evidence.
GovernanceDefenseResilienceThird-party & cloudICS
Frameworks
National depth and global standards: one control engine
Gulf groups juggle KSA national frameworks where they apply and ISO or NIST for entities in Bahrain, Kuwait, Oman, Qatar, and the UAE. Sentinel Unity maps them in one library, configurable to your jurisdiction's authorities.
BahrainKuwaitOmanQatarSaudi ArabiaUAE
Supported frameworks
Cyber Security Framework
SAMA CSF
KSA financialCyber framework for SAMA-regulated banks and insurers covering governance, operations, vendor risk, and resilience.
GovernanceRiskOperationsTPRM
Personal Data Protection
PDPL
GCC privacyPersonal data protection for KSA and alignment to Gulf privacy regimes, with inventory, consent, transfers, and breach workflows.
Lawful basisInventoryConsentBreach notification
Information Security Management
ISO/IEC 27001
GlobalInternational ISMS and Annex A controls, cross-mapped to NCA ECC and NIST for group entities.
ISMS scopeRisk assessmentAnnex ACertification planning
Cybersecurity Framework
NIST CSF
GlobalIdentify, Protect, Detect, Respond, Recover, tied to cyber risk, compliance, and reporting modules.
IdentifyProtectDetectRespondRecover
Custom authorities
Need a custom or internal framework?
Model your own control library, whether group policies, sector standards, or emerging national authorities, in the same engine as NCA, SAMA, and ISO.
Talk to our teamManage compliance frameworks in one connected platform
Book a demo with our GRC specialists to see how Sentinel Unity supports programs across the Gulf.
No commitment required. Typical demo is 45 minutes.