Faraz Ahmad

Oman's Ministry of Transport, Communications and Information Technology (MTCIT) has issued the Cybersecurity Governance Guidelines, which introduces a unified framework for governance, risk management and information security management. This guide not only aligns cybersecurity practices with existing information security strategies but also provides detailed steps for effective cybersecurity management. Additionally, the Basic Cybersecurity Controls document provides a set of essential security controls that government units must implement to safeguard their information assets effectively. This document is part of a broader effort to ensure comprehensive cybersecurity measures are in place across all government entities. https://lnkd.in/eefa6PBh

3

Want to learn how to form collaborative relationships with your suppliers? 🙌 Join us for our latest webinar where we’ll lift the lid on two award-winning supplier relationship management initiatives, as leaders from STC Solutions , a leading IT provider in Saudi Arabia, and global defence and security provider, Leonardo, share their journeys to success. Register for your spot via the link in the comments below 👇 #Procurement #Webinar #SupplyChain

5

1 Comment

The governance module in the GRC Orbit solution contains all cybersecurity frameworks and standards in the Kingdom of Saudi Arabia and helps you build policies, review them with other departments, and approve them according to a specific workflow, with the possibility of linking policy items with local frameworks. #governance #GRC #Cybersecurity

4

You can find the GCIv5 download link here.

1

Exciting news! International Foundation for Protection Officers MENASA IFPO MENASA - المؤسسة الدولية لضباط الحماية is hosting a webinar on "The use of technologies by #security #personnel." Join us as our CEO and founder, Ali LARIBI, CISSP, CPP, CISM, leads a discussion on how technology is transforming the security industry. Learn about the latest trends, challenges, and opportunities. Stay tuned for registration details! #securitytech #webinar #IFPOMENASA #securityindustry

23

Meet our Speaker Islam Mostafa Hosni, will join us at Arab Security Conference with his session about Digital forensics on steroids: how to combat cybercrime and leverage DF investigations with OSINT. Don't miss out his speech! #ASC #ASC2024 #ArabsecurityConference #CyberSecurity

30

Strengthening Cybersecurity with #NESA Security Controls 🔒 The UAE’s NESA (National Electronic Security Authority) framework sets rigorous standards to protect critical infrastructure. This framework is divided into two key families: 🔸 Management Control Family: Focuses on strategic areas like Risk Management, Compliance, and Security Training. 🔸 Technology Control Family: Covers technical aspects, from Access Control to Incident Management. Implementing these controls is essential for building a resilient cybersecurity posture, especially for sectors like Finance, Healthcare, and Telecommunications. Is your organization NESA-compliant? 🌟 👉 Don’t wait until it’s too late! Contact us today to ensure your compliance, strengthen your cybersecurity framework, and safeguard your critical assets! https://lnkd.in/debdjSxN #CyberSecurity #UAE #RiskManagement #InformationSecurity #Compliance #CyberResilience

11

New Report on Supply Chain Security reveals 23% Large Firms Assess Supply Chain Security     Full Report: https://lnkd.in/efWciqUZ     Bravo all to UK government including Ismail Abdul Ghafoor & Stephen Jones for their great work on #CyberSecurity.

2

✳️ #CQRMFellows #Saudi Arabia ✳️ 👨‍💻👨‍🎓 Congratulations to Sami AlAli for passing the final CQRM EXAM and earning permission to use the Certified in Quantitative Risk Management (CQRM®) designation! Institute of Risk Management International Institute of Professional Education and Research (IIPER) OSL Analytics Academy #Kudos Sami! The three-level IIPER-CQRM program provides deep empirical knowledge and technical skills to analyse and interpret data for #RiskManagement, understand the results using #MonteCarlo risk simulations and #PredictiveModels, implement #Statistics and #econometric analysis, run #StochasticOptimisation and add value using #RealOptionsAnalysis on business, projects, investments, and strategies. Well done! For more information about the Certified in Quantitative Risk Management (#CQRM®): 🚀Get Your Brochure📚 here - https://lnkd.in/ez4FpivK 🚀 Visit Institute of Risk Management - #CQRM 🌏 website: https://lnkd.in/edYkEkp5 #RailWayIndustry #engineering #Construction #RiskConsulting #cyberrisk #ERM #qualifiedriskprofessional #leadership #CQRMFellows #riskmanagement #riskquantification #CQRM #decisionanalytics #accounting #compliance #ESG #HSE #Energy #ElectricityGeneration

17

4 Comments

✳️ #CQRMFellows #Saudi Arabia ✳️ 👨‍💻👨‍🎓 Congratulations to Sami AlAli for passing the final CQRM EXAM and earning permission to use the Certified in Quantitative Risk Management (CQRM®) designation! Institute of Risk Management International Institute of Professional Education and Research (IIPER) OSL Analytics Academy #Kudos Sami! The three-level IIPER-CQRM program provides deep empirical knowledge and technical skills to analyse and interpret data for #RiskManagement, understand the results using #MonteCarlo risk simulations and #PredictiveModels, implement #Statistics and #econometric analysis, run #StochasticOptimisation and add value using #RealOptionsAnalysis on business, projects, investments, and strategies. Well done! For more information about the Certified in Quantitative Risk Management (#CQRM®): 🚀Get Your Brochure📚 here - https://lnkd.in/ez4FpivK 🚀 Visit Institute of Risk Management - #CQRM 🌏 website: https://lnkd.in/edYkEkp5 #RailWayIndustry #engineering #Construction #RiskConsulting #cyberrisk #ERM #qualifiedriskprofessional #leadership #CQRMFellows #riskmanagement #riskquantification #CQRM #decisionanalytics #accounting #compliance #ESG #HSE #Energy #ElectricityGeneration

30

5 Comments

Understanding the National Cybersecurity Authority (NCA) Framework NCA Framework provides a clear roadmap for enhancing their cybersecurity posture. By following the guidelines and regulations set forth by the NCA, businesses can protect themselves against cyber threats, ensure compliance with legal requirements, and build trust with customers and partners. Read more: https://lnkd.in/gpZCJEsr

8

Key Changes in NCA’s Essential Cybersecurity Controls (#ECC): 2018 vs. 2024 In 2024, the #National_Cybersecurity_Authority (#NCA) of Saudi Arabia released an updated version of its #ECC_framework, enhancing cybersecurity measures for organizations. Here are the major updates: Broader Scope: The ECC now covers more industries, including cloud computing and third-party security, addressing external vulnerabilities more effectively. New Pillars: 1- #Governance: Stronger focus on continuous monitoring and aligning security with business goals. 2- #Cyber_Defense: Advanced threat detection through AI and machine learning. 3- #Resilience: Emphasizes fast recovery from cyber incidents. 4- #Cloud and #Third_Party_Security: New controls for managing external services and cloud environments. 5- #Threat_Intelligence Integration: Real-time threat intelligence is now essential for dynamic threat response. 6- Stronger #Incident_Response: Focus on defined roles, procedures, and regular training to handle incidents effectively. 7- Stricter #Compliance: Increased accountability with periodic assessments and audits to ensure sustained security measures. Wait for our artical for more details

2

"Saudi Arabia: SDAIA advises data controllers and processors to register on the National Data Governance Platform" On September 15, 2024, SDAIA announced via LinkedIn that both public and private controllers and processors must register in the National Data Governance Platform. This is a part of the Rules Governing the National Register of Controllers Within the Kingdom, which were released in August 2024. For private entities, the steps to register are as follows: -Appoint a representative who will manage the registration process. -Sign into the Platform using the representative's single sign-on credentials. -Complete the required assessments to obtain the registration certificate. SDAIA has provided detailed guides outlining the registration process for both Government and private entities. You can read the posts and access the registration steps through the provided LinkedIn links. You can read the LinkedIn posts on the Platform https://lnkd.in/gqphsJ3h , on the invitation to register https://lnkd.in/gckaSrNS, on private entities' registration https://lnkd.in/gbdg_qhj, and on Government entities' registration https://lnkd.in/gEau9Bv5. #SDAIA #DataCompliance #PrivacyRegulationKSA #DigitalTransformation #PDPL

3

ICYMI: Mitigating cyber risks: the essential role of collaboration for Middle East organizations #itpfed

1

The National Cybersecurity Authority (NCA) has reported that the cybersecurity sector contributed a remarkable SR15.6 billion to Saudi Arabia's GDP in 2023, with SR8.6 billion from direct contributions and SR7 billion from indirect contributions. The number of registered cybersecurity providers has reached 353, reflecting a thriving ecosystem of products, solutions, and services in the Kingdom. Notably, Saudi Arabia boasts 19,600 cybersecurity professionals, with women making up over 32% of the workforce—surpassing the global average by 28%! The market size reached SR13.3 billion last year, with private sector spending accounting for 69% of total expenditure. Key offerings include network security, endpoint protection, and cloud security. The NCA, in collaboration with leading consulting firms and experts, developed this report to highlight the sector's growth and its pivotal role in safeguarding national security and critical infrastructure. As the central authority for cybersecurity in Saudi Arabia, the NCA is dedicated to enhancing the Kingdom's cybersecurity posture and driving innovation in the industry. #Cybersecurity #SaudiArabia #NCA #Innovation #InTech #Techinsights #investsaudi #startupinsaudi #DigitalTransformation

1

Benefits of the SAMA Cybersecurity Framework The SAMA Cybersecurity Framework is a powerful tool for financial institutions in Saudi Arabia, providing a structured approach to managing cybersecurity risks, ensuring compliance, and protecting sensitive information. By adopting this framework, organizations can enhance their cybersecurity governance, improve risk management, and strengthen their incident response capabilities. https://lnkd.in/gQESGPQ9 #SAMA #benefits #saudi #KSA #compliance

5

In response to the evolving needs of government entities, Tatweer has developed an integrated and innovative solution to streamline and unify inspection tasks. The Unified Inspection System (UIS) tackles critical challenges such as duplication of operations, and difficulties in tracking and documentation, while providing advanced tools to improve efficiency, transparency, and accountability. The system is strategically designed to achieve the following objectives: 1.Enhance inspection processes to foster economic development. 2.Optimize the utilization of expertise and knowledge to establish a unified inspection system across entities. 3.Improve government efficiency, raise community awareness, and enrich the customer journey. #Tatweer #GovernmentEfficiency #UnifiedInspection 

29